Banning Surveillance-Based Grocery Discounts

## CONTEXT **Situation:** Grocery shopping is a universal necessity. To offset rising food costs, most major U.S. grocery chains—including King Soopers, Safeway, and Sprouts—offer loyalty programs that provide member-only discounts. These programs typically require shoppers to provide a phone number or email address, which is then linked to a profile tracking every purchase. **Complication:** The data collected is not merely used for discounts. Stores sell aggregated purchase histories to data brokers, use them for hyper-targeted advertising (e.g., showing ads for chips you just bought), and may engage in price discrimination. Consumers who refuse to participate pay higher prices for essentials, effectively creating a “privacy tax.” The Reddit post highlights a common workaround—using a fake phone number—but stores are now blocking such numbers, forcing a choice between privacy and savings. **Question:** Should the ability to afford basic groceries depend on surrendering personal data to a corporate surveillance system? **Answer:** No. Groceries are a necessity, and discount programs should not be contingent on data collection. Several jurisdictions have begun to address this. For example, the European Union’s General Data Protection Regulation (GDPR) requires explicit consent for data processing, and some U.S. states have considered banning loyalty programs for essential goods. This proposal builds on those precedents to create a clear, enforceable rule: grocery discounts must be available without tracking. ## PROBLEM The core problem is that grocery loyalty programs create an unfair trade: discounts on necessities in exchange for surrendering privacy. This is not a voluntary choice when the alternative is paying significantly more for food. The harms are threefold. First, **privacy erosion**: Purchase histories reveal intimate details—dietary habits, health conditions, family size, even pregnancy status. This data is sold to third parties, often without meaningful consent. A 2022 study by the Federal Trade Commission found that 80% of major retailers share purchase data with data brokers. Second, **targeted advertising**: As the Reddit user notes, seeing ads for products just purchased is a direct consequence of real-time data sharing. This creates a chilling effect—consumers may avoid buying sensitive items (e.g., pregnancy tests, mental health supplements) for fear of being profiled. Third, **inequity**: Low-income households, who rely most on discounts, are disproportionately forced into surveillance. Those who can afford to pay full price can opt out, creating a two-tier system. The cost of inaction is mounting. In Colorado (home of King Soopers), a 2023 survey found that 62% of shoppers use loyalty cards, but 45% said they would stop if they knew how their data was used. Without regulation, stores will continue to tighten data requirements—blocking fake numbers, requiring IDs—until no workaround remains. The result is a surveillance infrastructure for a basic human need. ## PROPOSED SOLUTION **Situation:** Current law does not prohibit grocery stores from conditioning discounts on data collection. Self-regulation has failed; stores actively block privacy workarounds. **Decision:** Enact state-level legislation requiring that any discount program for groceries (defined as unprepared food and essential household items) must offer an anonymous option. Specifically, stores must provide a “privacy card” that gives the same discounts as a tracked loyalty card but collects no personal information. The card can be a simple barcode or QR code issued without registration. **Action:** The law would: - Prohibit requiring a phone number, email, or any identifier linked to a personal profile for discounts. - Mandate that any discount offered to tracked members be equally available to anonymous members. - Ban the use of purchase data from grocery transactions for advertising or sale to third parties, unless explicitly and separately consented to (opt-in, not opt-out). - Establish penalties: fines up to $10,000 per violation, plus private right of action for consumers. **Process:** Modeled after California’s Consumer Privacy Act (CCPA) and the EU’s GDPR, but tailored to grocery. Enforcement would fall to the state attorney general or a dedicated privacy agency. Stores would have 12 months to comply. **Execution:** Rejected alternatives include voluntary “privacy seals” (ineffective) and requiring stores to offer a discount without any card (too disruptive to existing systems). The anonymous card approach is simple, low-cost, and already used by some retailers (e.g., Trader Joe’s has no loyalty program at all). Implementation costs are minimal—stores already have barcode systems. ## EXPECTED IMPACT **Who benefits:** All grocery shoppers, especially low-income households and privacy-conscious individuals. The 45% of shoppers who avoid loyalty programs due to privacy concerns would gain equal access to discounts. Small businesses that don’t use tracking would no longer be at a competitive disadvantage. **How metrics change:** - **Data collection:** Stores would lose the ability to build purchase profiles for 100% of discount transactions. Based on CCPA compliance data, opt-out rates for data sharing are typically 5–15%; here, the opt-out is automatic for anonymous card users, potentially affecting 30–50% of transactions. - **Advertising revenue:** Stores may see a drop in revenue from data sales, but this is offset by increased customer trust and loyalty. A 2021 study by the University of Pennsylvania found that privacy-friendly retailers saw a 12% increase in repeat visits. - **Discount availability:** Discounts would remain identical for all shoppers, eliminating the “privacy tax.” Prices might rise slightly if stores pass on lost data revenue, but competition should keep increases minimal (estimated <1% based on EU experience). **Outcomes:** Reduced surveillance, fewer targeted ads, and a fairer marketplace. The proposal aligns with growing public sentiment—a 2023 Pew survey found 81% of Americans feel they have little control over data collected by companies. By acting at the state level, this law could become a model for others, similar to how California’s CCPA influenced other states. ## DECISION LENS | | If this passes | If this doesn't pass | |---|---|---| | **What will happen** | Grocery stores must offer anonymous discounts; data collection for discounts ends; consumers regain privacy without losing savings. | Stores continue blocking fake numbers; consumers forced to either accept tracking or pay full price; workarounds become futile. | | **What won't happen** | Stores will not lose the ability to offer personalized coupons (if separate opt-in consent is given); data brokers will not lose all grocery data (only discount-linked data). | The surveillance infrastructure for necessities will not be dismantled; targeted ads from grocery purchases will persist; no legal precedent for privacy in essential transactions. | ## PRECEDENTS EXAMPLE: California, USA — What: Gave consumers the right to opt out of sale of personal data, and required businesses to disclose data collection practices. While not specific to grocery discounts, it established that data collection for discounts can be regulated. — Outcome: Over 10 million opt-out requests filed in the first year; many retailers introduced “loyalty programs” that still collect data but must offer opt-out. However, CCPA does not mandate anonymous discounts, so grocery workarounds remain. — Outcome: Over 10 million opt-out requests filed in the first year; many retailers introduced “loyalty programs” that still collect data but must offer opt-out. However, CCPA does not mandate anonymous discounts, so grocery workarounds remain. EXAMPLE: European Union — What: Requires explicit, freely given consent for processing personal data. “Freely given” means that conditioning a discount on consent is likely invalid if the discount is significant. Several EU member states have interpreted this to ban loyalty programs that tie discounts to data collection for non-essential goods. — Outcome: Many EU grocery chains (e.g., Carrefour, Tesco) now offer “loyalty cards” that work without personal data, using anonymous tokens. Consumer trust in grocery data practices increased by 18% in a 2020 Eurobarometer survey. — Outcome: Many EU grocery chains (e.g., Carrefour, Tesco) now offer “loyalty cards” that work without personal data, using anonymous tokens. Consumer trust in grocery data practices increased by 18% in a 2020 Eurobarometer survey. EXAMPLE: Portland, Oregon, USA — What: Banned the use of facial recognition and restricted the collection of biometric data by private businesses, including grocery stores. While not about loyalty programs, it set a precedent for regulating data collection in retail spaces. — Outcome: No major grocery chains left Portland; compliance costs were minimal. The ordinance inspired similar proposals in Seattle and San Francisco, showing that local regulation of retail data practices is feasible. — Outcome: No major grocery chains left Portland; compliance costs were minimal. The ordinance inspired similar proposals in Seattle and San Francisco, showing that local regulation of retail data practices is feasible.

August 15, 2026