The click-to-cancel rule was supposed to make canceling a subscription as easy as signing up. Then, in mid-2025, a federal appeals court threw it out. If you run a subscription business, it is tempting to read that as permission to relax. That would be a mistake.
The federal rule is gone, but the legal duties behind it are very much alive — and the FTC has already started writing a replacement. This guide explains what the click-to-cancel rule required, why it was vacated, what still binds subscription businesses in 2026, and the concrete moves smart operators are making now.
What You’ll Learn
- What the click-to-cancel rule was
- Why it was vacated
- What still applies: ROSCA and the states
- The new rule that is coming
- 6 compliance moves that still matter
- What FTC enforcement looks like
- Why “the rule is dead” is the wrong takeaway
- Frequently asked questions
What the Click-to-Cancel Rule Was
The click-to-cancel rule was the popular name for the FTC’s amended Negative Option Rule, finalized in late 2024. A “negative option” is any arrangement where a customer’s silence or inaction counts as consent to keep being charged — the classic auto-renewing subscription.
The rule aimed to standardize three things across every industry and medium: clear disclosure of terms before billing, express informed consent to the recurring charge, and a cancellation path at least as simple as sign-up. In plain terms, if a customer could subscribe in two clicks, they had to be able to cancel in about two clicks — hence the nickname.
Negative options are everywhere: streaming services, software subscriptions, meal kits, gym memberships, and “free trials” that convert to paid. The model itself is not the problem — the law targets the gap between how easy it is to start and how hard it is to stop. That gap is exactly what the click-to-cancel rule tried to close, and it is what regulators still police today.
Why the Click-to-Cancel Rule Was Vacated
On July 8, 2025, the U.S. Court of Appeals for the Eighth Circuit vacated the rule. The court did not say the substance was wrong; it said the FTC skipped a required step. Because the rule’s compliance costs topped $100 million, the agency had to issue a preliminary regulatory analysis, and it did not.
That procedural miss wiped the rule off the books nationwide. The rule’s history and the agency’s next move are laid out in the Federal Register. The lesson for businesses: the click-to-cancel requirements are not currently mandated by that federal rule — but “not currently mandated” is a long way from “does not matter.”
What Still Applies: ROSCA and State Laws
Here is the part that catches operators off guard. Vacating the click-to-cancel rule did not repeal the other laws that govern subscriptions. Two big ones never went anywhere.
First, federal law. The Restore Online Shoppers’ Confidence Act (ROSCA) still bars charging consumers through online negative options without clear disclosure, informed consent, and a simple way to cancel. The FTC enforces ROSCA aggressively, and it does not need the vacated rule to do it.
Second, state law. California, New York, and a growing list of states have their own automatic-renewal statutes, several of which already require easy online cancellation. These operate independently of the federal rule and, in some states, go further. For a related state-level consumer trend, see our note on the Illinois junk-fee ban.
California is the one to watch
California’s Automatic Renewal Law is the strictest in the country and was toughened again for 2025. It requires clear up-front disclosure, affirmative consent to the recurring charge, a straightforward online way to cancel, and renewal reminders for longer terms. Because so many businesses sell into California, its rules effectively set a national floor — which is a big reason many companies kept their click-to-cancel flows in place even after the federal rule fell.
The FTC Is Not Done: A New Rule Is Coming
The agency responded to the vacatur by starting over, not standing down. On March 11, 2026, the FTC announced an Advance Notice of Proposed Rulemaking to rebuild its negative-option rule, according to the FTC. Public comments were due April 13, 2026.
An ANPRM is an early step, and a final rule will take time — a comment period on the concept, then another on the actual text. But the direction is clear: some version of click-to-cancel is coming back. Businesses that quietly re-added cancellation friction after the rule fell are building compliance debt they will have to unwind.
There is also a practical reason not to wait for a final rule: whatever the FTC lands on will likely resemble what it just proposed, so building to the click-to-cancel standard now avoids a scramble later.
6 Compliance Moves That Still Matter
Whatever the federal rule does next, these steps keep a subscription business defensible under ROSCA and state law today:
- Disclose before you bill. Put price, renewal frequency, and terms right where the customer agrees — not buried in a linked policy.
- Get express, separate consent. The agreement to recurring charges should be its own affirmative action, not a pre-checked box.
- Make cancellation easy. If sign-up is online, cancellation should be online too — the heart of click-to-cancel and of several state laws.
- Send renewal reminders. Many state statutes require advance notice before long or auto-renewing terms roll over.
- Keep records of consent. Be able to prove what the customer saw and agreed to, and when.
- Audit your funnel. Walk the real sign-up and cancel flows the way a regulator would, and fix the friction.
These are not just about the click-to-cancel rule; they track how the FTC actually brings cases. The mechanics live in your contracts — see our guide to subscription agreements for the terms that matter. If AI tools handle your sign-up or support, their disclosures count too, as we cover in the legal risk of AI receptionists.
What FTC Enforcement Actually Looks Like
Understanding the risk means understanding how the FTC brings these cases. The agency targets “dark patterns” — design choices that make signing up effortless and canceling a maze. Common problems include hiding the recurring nature of a charge, forcing customers to call during limited hours to cancel, burying cancellation behind surprise retention offers, and failing to get clear consent before the first charge.
The remedies are not trivial. ROSCA violations can carry civil penalties and consumer refunds, and the FTC has pursued household-name brands over exactly these flows. Because this enforcement runs on ROSCA and state law rather than the vacated rule, it did not pause when the click-to-cancel rule fell — it continued right through it. That is the practical reason to keep an easy-cancellation design even while the federal rule is on hold.
Why “The Rule Is Dead” Is the Wrong Takeaway
The businesses most exposed right now are the ones treating the vacatur as a green light. FTC enforcement under ROSCA continues, state regulators are active, and private plaintiffs bring auto-renewal claims regardless of the federal rule’s status. The advertising and endorsement side carries similar exposure, which we cover in influencer agreements and the FTC.
The smart posture is to treat click-to-cancel as best practice, not as a rule you can ignore because it was vacated. Companies that launch or scale on recurring revenue should pressure-test the model early — a theme in our piece on a legal review before launch. Businesses that run on regulated or recurring revenue also need disciplined compliance operations; our affiliate Collateral Base helps operators build those systems.
Frequently Asked Questions
Is the click-to-cancel rule still in effect?
No. The Eighth Circuit vacated the FTC’s amended Negative Option Rule on July 8, 2025, on procedural grounds, so it is not currently enforceable as a standalone rule. However, ROSCA and state auto-renewal laws still impose similar duties.
Do subscription businesses still need easy cancellation?
In practice, yes. ROSCA requires a simple cancellation mechanism for online negative-option programs, and several state laws mandate online cancellation directly. Easy cancellation remains the safest and most defensible design.
Is the FTC bringing back a click-to-cancel rule?
It appears headed that way. In March 2026 the FTC opened a new rulemaking on negative-option marketing, with public comments due April 13, 2026. A final rule will take time, but the direction points back toward click-to-cancel-style requirements.
What happens if my cancellation flow is hard to use?
You can face FTC enforcement under ROSCA, state regulator action, and private lawsuits — none of which depend on the vacated rule. Deceptive or obstructive cancellation is exactly what those laws target.
Does click-to-cancel apply to business-to-business subscriptions?
The consumer-protection statutes focus on transactions with consumers, so pure business-to-business deals sit outside much of ROSCA and state auto-renewal law. That said, if you sell to sole proprietors or very small businesses, the line can blur, and clear cancellation terms remain good practice for every subscription contract.
Next Steps
The click-to-cancel rule is down but not out, and the laws around it never left. Contact Howard East to audit your subscription terms and cancellation flow before a regulator or plaintiff does it for you. If your business is facing an FTC inquiry or a consumer suit, our colleagues at Howard Law Group handle the litigation.
This article is general information, not legal advice. No attorney-client relationship is created by reading it. Attorney Advertising.
