Subscription-based e-commerce may look simple on the surface. For many businesses, the process often involves offering a free trial, converting users, and then billing them monthly. Legally, though, it is one of the most scrutinized business models today. Automatic renewals, negative option billing, and free-to-paid conversions are all governed by strict consumer protection laws. If your business charges customers on a recurring basis, you must adhere to certain legal requirements, as anything less can quickly turn into a legal problem.

These legal requirements are commonly called automatic renewal laws. These laws ensure that consumers are not unknowingly locked into ongoing charges. As a business, you are required to clearly disclose subscription terms, obtain proper consent, and make it easy for customers to cancel.

Under U.S. federal laws, particularly the Restore Online Shoppers’ Confidence Act and Section 5 of the FTC Act, there are three requirements every business owner should know.

Disclosures Must Be Clear and Conspicuous. You should not hide key terms in fine print. Customers should immediately understand what they are signing up for, how much they will be charged, and how often.

Consent for Renewal Must Be Informed and Affirmative. This means that customers must actively agree to the recurring charges, and the agreement must be related to the autorenewal feature.

Cancellation Must Be Simple. The law states that if a customer can sign up with a single click, they should be able to cancel just as easily. You should not require them to make phone calls, send emails, or involve them in complicated steps.

In addition to federal laws, there are state requirements that you must adhere to. For example, New York requires detailed upfront disclosures, including the exact cost, billing frequency, and the deadline to cancel before the next charge. On the other hand, California law emphasizes express affirmative consent, meaning that customers must clearly agree to the auto-renewal term, separately from the rest of the contract.

In many states, you are required to issue an advance notice before renewals or when key terms change. If you plan to increase prices or modify subscription terms, you may need to notify customers between 7 and 30 days in advance. Some laws even require annual reminders, regardless of the frequency of the autorenewal. If the FTC believes your business is engaging in deceptive subscription practices, the penalties can be severe. Recently, there have been multi-million and even billion-dollar settlements for violations. For example, Adobe was ordered to pay a $150 million settlement and injunction for allegedly using fine print to hide important information and making it difficult for subscribers to cancel.

So, what do you do to ensure compliance? The first step is to ensure your subscription terms are written in plain language, clearly explaining pricing, renewal cycles, and cancellation steps. Additionally, send reminders before renewals, notify customers of any changes, and ensure support is easy to access. If your customers are well-informed, they are less likely to file complaints. Also, simplify the cancellation process. Making it easy for customers to cancel their subscription, say with a visible “cancel” button, not only ensures you are compliant with the law, but it goes a long way in enhancing customer satisfaction and your reputation.

The FTC’s Negative Option Rule: Federal Requirements for Auto-Renewal

The Federal Trade Commission’s Negative Option Rule, 16 C.F.R. Part 425, was significantly updated in 2024 to address auto-renewal and subscription billing practices in e-commerce. The rule requires sellers using negative option marketing—arrangements in which consumers’ silence or failure to cancel is treated as consent to continue being charged—to clearly and conspicuously disclose all material terms of the offer before obtaining billing information. “Material terms” include the subscription price, the billing frequency, the fact that charges will continue until cancelled, the deadline to cancel to avoid the next charge, and how to cancel. These disclosures must appear “immediately adjacent” to the mechanism the consumer uses to accept the offer.

The 2024 update adds three specific requirements that directly affect e-commerce subscription businesses. First, sellers must obtain the consumer’s express informed consent to the negative option feature as a separate, standalone consent—a checkbox or affirmative acknowledgment specifically covering the auto-renewal terms, distinct from consent to other terms and conditions. Second, sellers must provide a “simple mechanism for cancellation” that is at least as easy to use as the enrollment mechanism—if a consumer can subscribe with a single click, they must be able to cancel with a single click (the “click-to-cancel” requirement). Third, sellers must send annual reminders to subscribers for free trial and introductory offer conversions, notifying them that the trial is ending and charges will begin. Violations of the Negative Option Rule subject businesses to civil penalties of up to $51,744 per violation.

California’s ARL: The Nation’s Strictest Auto-Renewal Statute

California’s Automatic Renewal Law (ARL), Cal. Bus. & Prof. Code §§ 17600–17606, is the most detailed and strictly enforced state auto-renewal statute in the country and sets the practical compliance floor for any e-commerce subscription business that sells to California customers. The ARL requires that before charging a consumer, the seller must present the automatic renewal offer terms in a “clear and conspicuous” manner—defined as larger type than surrounding text, contrasting type, font, or color, or set off from surrounding text in a manner that clearly calls attention to the language. The offer must disclose: the automatic renewal price, the length of the initial period, how to cancel, and, for free trials, the price after the trial ends and when charges will begin.

California’s ARL also requires positive consent to the automatic renewal terms and, critically, delivery of the offer terms, cancellation policy, and payment authorization in a form the consumer can retain—meaning the consumer must receive an email confirmation with all of these terms after subscribing. If a business does not comply, any goods or services provided under the ARL-deficient subscription are deemed “unconditional gifts” to the consumer, meaning the consumer has no obligation to pay for them. This gift provision has been the basis for class action lawsuits seeking refunds of all charges collected under non-compliant subscriptions—potentially covering months or years of billing.

State-by-State Requirements: The Compliance Matrix

Beyond California, over 30 states have enacted auto-renewal statutes with varying requirements. New York’s ARL, Gen. Bus. Law § 527, requires clear and conspicuous disclosure of automatic renewal terms before purchase, a post-purchase acknowledgment with cancellation instructions, and advance notice to consumers before a free trial or discount period converts to full-price billing—specifically, 3 to 30 days before the conversion. New York’s statute was amended in 2023 to strengthen cancellation ease requirements and add penalties. Delaware, Vermont, Oregon, and Utah have enacted similar statutes with varying disclosure and notice timelines.

The variation among state statutes creates a compliance challenge for national e-commerce subscription businesses. A disclosure format that satisfies Federal requirements may not satisfy California’s font-size requirements; a cancellation mechanism that meets the FTC’s “simple mechanism” standard may not satisfy the “equally easy” standard California courts have applied in class action litigation. The practical approach for most businesses is to design the subscription enrollment and cancellation flow to the highest standard applicable across all states where customers are located—which typically means California’s ARL—and then verify that this baseline also satisfies requirements in New York and other states where you have significant customer concentrations.

Designing a Compliant Auto-Renewal Flow

A compliant auto-renewal enrollment flow for e-commerce has several required elements. The automatic renewal terms must appear in a box or other visual container set off from surrounding text, immediately before the purchase or subscribe button. The consumer must affirmatively check a box—not a pre-checked box—acknowledging the auto-renewal terms as a separate consent action. After enrollment, an email confirmation must be sent within a reasonable time (best practice is immediately) that includes the auto-renewal terms, the price, the billing date, and clear cancellation instructions. If a free trial is offered, a separate pre-conversion notice must be sent before the paid subscription begins.

The cancellation flow is equally important. Courts and regulators have found that requiring consumers to call a phone number to cancel when they subscribed online violates the “equally easy” standard. Cancellation must be available online if enrollment was online. Under the FTC’s 2024 Negative Option Rule, a click-to-cancel mechanism must be accessible from within the consumer’s account settings without requiring them to navigate to a separate cancellation portal or speak to a retention agent before the cancellation is processed. Retention offers—attempting to offer a discount before accepting a cancellation—must be presented after the consumer has confirmed they want to cancel, not as a gatekeeping step that must be passed before cancellation is processed.

Class Action Litigation Risk Under Auto-Renewal Laws

Auto-renewal law violations have generated a substantial wave of class action litigation, particularly in California. Plaintiffs’ attorneys target e-commerce subscription businesses with class claims that all subscribers who signed up during a period of non-compliance are entitled to refunds under the “unconditional gift” provision of the California ARL. Because these claims aggregate thousands or millions of individual transactions, the damages exposure can be enormous—often large enough to force expensive settlements even when the defendant believes it has substantive defenses. High-profile settlements have included companies across the fitness, software, media, and consumer products sectors.

Defenses to ARL class actions focus on whether the disclosures actually made were clear and conspicuous under the applicable standard, whether the plaintiff actually saw and understood the enrollment terms, whether damages are properly calculated, and whether class certification is appropriate given variations in how individual consumers enrolled. An effective defense requires detailed records of your enrollment flow at each point in time—screenshots, A/B test records, and deployment logs showing exactly what disclosures appeared when the plaintiff subscribed. Businesses that cannot reconstruct their historical enrollment flow face a significant evidentiary disadvantage in these cases.

If your subscription e-commerce business needs an auto-renewal compliance audit—or if you are facing a class action or regulatory investigation under California’s ARL or the FTC’s Negative Option Rule—contact the internet law and e-commerce attorneys at Revision Legal through the form on this page or call (855) 473-8474. Our e-commerce practice and internet law practice advise subscription businesses on compliance and class action defense nationwide.