How about GDPR 2.0, if PII is involved in personal pricing schemes and you are found to be in violation you will need to inform all of the customers paying higher than your lower rate what you did to them, pay the money back, and have a higher minimum fine and a higher maximum fine.