“The click-to-cancel rule got struck down, so we’re fine, right?” Andrew S. Bosin hears a version of this question from SaaS founders almost every time auto-renewal comes up — and it’s the single most dangerous misconception in subscription compliance right now. The rule’s vacatur removed one specific federal regulation. It didn’t touch the older law that regulators are actually using to bring enforcement actions, and it didn’t touch a single state auto-renewal statute. If your subscription flow was built assuming this issue went away in 2025, this guide is for you.
What Actually Happened to the Click-to-Cancel Rule
The FTC finalized its “click-to-cancel” rule — technically the Negative Option Rule — in late 2024, requiring that cancellation be at least as easy as sign-up, with clear pre-enrollment disclosures and a prohibition on certain retention tactics during cancellation. In July 2025, the Eighth Circuit Court of Appeals vacated the rule, but on procedural grounds — the FTC hadn’t followed the correct rulemaking process under the Magnuson-Moss Warranty Act. The substance of the rule was never found unlawful. In January 2026, the FTC responded by opening a new Advance Notice of Proposed Rulemaking to restart the process correctly, signaling that a federal rule covering this exact conduct is very likely coming back.
ROSCA Didn’t Go Anywhere
This is the part founders miss. The Restore Online Shoppers’ Confidence Act — the federal law the FTC has actually been using to bring seven and eight-figure settlements against subscription businesses — was never affected by the Eighth Circuit’s decision. ROSCA requires clear disclosure of subscription terms before charging a customer, express informed consent to the recurring charge, and a simple mechanism to stop the charges. The FTC has continued bringing ROSCA enforcement actions throughout the vacatur, and the agency has been explicit that it considers a confusing or burdensome cancellation flow to be independently actionable under Section 5 of the FTC Act as an unfair or deceptive practice, separate from whether the specific click-to-cancel rule is in effect.
State Auto-Renewal Laws Still Apply — and Some Are Getting Stricter
Every SaaS company selling nationwide is subject to a patchwork of state automatic renewal laws regardless of what happens federally. California’s Automatic Renewal Law is the most stringent and the most closely watched by other states drafting their own versions, and it has been the subject of active legislative renewal and amendment efforts. New York has its own automatic renewal disclosure requirements. The general standard emerging across states: cancellation must be roughly as easy as sign-up, renewal terms must be disclosed clearly and conspicuously — not buried in a Terms of Service wall of text — and free-trial-to-paid conversions require specific advance disclosure of the price and date of the first charge.
What This Means for Your Subscription Flow
A defensible 2026 auto-renewal compliance posture for a SaaS company typically requires:
- Clear, conspicuous pre-enrollment disclosure of the recurring charge amount, billing frequency, and renewal terms — not buried in a Terms of Service link nobody clicks.
- A cancellation flow that doesn’t require more steps than sign-up. If a customer can subscribe in two clicks, requiring a phone call or a multi-step retention gauntlet to cancel is exactly the “cumbersome cancellation” pattern the FTC has cited in recent settlements.
- Specific free-trial disclosure — the exact price, the exact date of the first charge, and how to cancel before being billed, disclosed before the trial begins, not after.
- State-specific renewal reminder emails where required, particularly for longer-term (annual or multi-year) subscriptions, which several states require regardless of federal rule status.
- Records of consent — an auditable trail showing the customer affirmatively agreed to the recurring charge, separate from merely checking a box to create an account.
This is exactly the kind of clause our complete guide to SaaS Terms of Service flags as one of the most dangerous gaps in founder-drafted terms: a ToS that simply states “subscriptions auto-renew” without meeting state-specific disclosure and cancellation requirements can trigger regulatory action on its own, independent of anything else in the agreement. Auto-renewal and billing terms are also one of the core provisions we walk through in our broader guide to what an AI SaaS lawyer actually does — subscription tiers, billing cycles, and auto-renewal terms sit alongside data ownership and liability provisions as foundational, not optional, parts of a subscription agreement.
Why This Belongs in Your Subscription Agreement, Not Just Your Checkout Flow
Founders sometimes treat auto-renewal compliance as a product/UX problem to solve in the billing flow, separate from the legal contract. That’s a mistake. Your Terms of Service or subscription agreement needs to state the renewal terms in a way that’s consistent with what your checkout flow actually discloses — regulators and plaintiffs’ attorneys look at both together, and a mismatch between what your contract says and what your UI actually does is its own source of liability. Our guide to subscription terms and auto-renewals covers how these clauses fit into the broader SaaS agreement, alongside payment terms, late fees, and refund policies.
Frequently Asked Questions
Does the vacatur of the click-to-cancel rule mean my company doesn’t need to worry about this anymore?
No. ROSCA, the FTC’s general Section 5 authority, and state auto-renewal laws all remain fully enforceable and are being actively used for enforcement right now.
Is the click-to-cancel rule coming back?
The FTC opened a new rulemaking process in January 2026 to fix the procedural defect the Eighth Circuit identified. A revised federal rule covering substantially similar conduct is a real possibility, not a certainty, but companies should not assume the issue is closed.
Does this apply to B2B SaaS, or only consumer subscriptions?
The vacated FTC rule was deliberately drafted to reach B2B subscriptions in addition to B2C. Most state auto-renewal statutes exempt B2B contracts, but companies selling to small businesses or sole proprietors should not assume they’re automatically outside scope — the analysis is fact-specific.
What’s the fastest way to check if my current flow is compliant?
Compare your actual sign-up-to-cancellation click count, review your free-trial disclosure language against the specific-price-and-date standard, and confirm your Terms of Service auto-renewal language matches state disclosure requirements — ideally with an attorney who can review the checkout flow and the contract together.
Get Your Subscription Flow and Terms Reviewed Together
Andrew S. Bosin LLC reviews SaaS subscription agreements and auto-renewal disclosures as a matched pair — not just the contract, but whether your actual billing and cancellation flow matches what the contract promises.
📞 201-446-9643 | ✉️ andrewbosin@gmail.com | 🌐 www.njbusiness-attorney.com
📍 36 Highland Road, Glen Rock, New Jersey 07452
Related Guides
- SaaS Terms of Service That Actually Protects You: Clause-by-Clause Breakdown — www.njbusiness-attorney.com/saas-terms-of-service-clause-by-clause/
- What Does an AI SaaS Lawyer Actually Do? A Founder’s Guide — www.njbusiness-attorney.com/what-does-an-ai-saas-lawyer-do/
- AI SaaS Subscription Agreement: The Complete 2026 Guide — www.njbusiness-attorney.com/ai-saas-subscription-agreement/
- Key Areas of Negotiation in SaaS Agreements — www.njbusiness-attorney.com/key-areas-of-negotiation-in-saas-agreements/
This blog post is for informational purposes only and does not constitute legal advice.
#SaaSCompliance #ClickToCancel #ROSCA #FTCCompliance #SaaSLawyer #SubscriptionBusiness