This article is provided for educational and informational purposes only. It does not constitute legal, financial, or tax advice, and no attorney-client relationship is formed by reading it. Laws, regulations, official guidance, and related information vary by jurisdiction, change frequently, and may have changed or become outdated since publication. Always verify current information with authoritative sources and consult a qualified professional about your specific circumstances. The author and publisher assume no liability for actions taken based on this information.
Key Facts
- Federal level: An automatic renewal is a negative-option arrangement because a consumer’s silence or failure to cancel is treated as permission for continued service and recurring charges.
- Federal level: ROSCA requires online negative-option sellers to disclose material terms clearly, obtain express informed consent before charging, and provide simple mechanisms to stop recurring charges.
- Federal level: A federal appeals court vacated the FTC’s expanded 2024 “click-to-cancel” rule in July 2025, so the amendment did not become the nationwide rule the agency announced.
- Federal and state: Federal statutes and FTC rules form only part of the framework; state automatic-renewal laws may impose additional duties.
Auto-renewal lets a subscription, membership, or service continue for another term unless the customer cancels. It can prevent an unwanted interruption, but it also shifts attention to the disclosures made at enrollment, the consumer’s consent, and the method for stopping future charges.
Federal law treats many automatic renewals as “negative options.” In a negative-option arrangement, silence or failure to take an affirmative step is treated as acceptance of continued goods, services, or billing. Free-to-paid trials, continuity plans, and some product-of-the-month clubs use related structures, but different federal provisions can apply to different methods and sales channels.
What ROSCA requires for online auto-renewal
The Restore Online Shoppers’ Confidence Act, or ROSCA, governs negative-option features in transactions effected on the internet. Its operative provision is 15 U.S.C. § 8403.
Before obtaining billing information, the seller must clearly and conspicuously disclose all material terms of the transaction. The seller must obtain the consumer’s express informed consent before charging a credit card, debit card, bank account, or other financial account. The seller must also provide simple mechanisms for stopping recurring charges.
These are separate requirements. A cancellation method does not cure missing consent, and consent does not eliminate the duty to disclose material terms clearly. The relevant terms commonly include that charges will recur, when a trial converts, the amount or method of calculating charges, the renewal period, and how cancellation works.
The FTC Act still matters
Section 5 of the Federal Trade Commission Act prohibits unfair or deceptive acts or practices in or affecting commerce. That authority can reach misleading statements, material omissions, unauthorized billing, and obstructive cancellation practices even when a specialized subscription rule does not cover the transaction.
The FTC enforces ROSCA as if a violation were a violation of an FTC trade-regulation rule. ROSCA also authorizes enforcement by state attorneys general under specified conditions. An FTC complaint states allegations and begins litigation; it is not itself a judicial finding that a company violated the law.
The agency’s pending case against Uber illustrates the distinction. The FTC alleges that the Uber One subscription used a negative-option feature without a simple mechanism to stop recurring charges and included enrollment and consent problems. The company disputes the allegations, and the case page listed the matter as pending in May 2026.
What happened to the click-to-cancel rule
In 2024, the FTC adopted a broad amended Negative Option Rule covering recurring subscriptions and other negative-option programs across media. It would have required a cancellation mechanism that was at least as easy to use as the method of enrollment, along with disclosure and consent protections.
The United States Court of Appeals for the Eighth Circuit vacated the amendment on July 8, 2025, before its main requirements were scheduled to take effect. The court concluded that the FTC had failed to conduct a preliminary regulatory analysis required by the agency’s rulemaking statute after the economic impact crossed the statutory threshold.
Vacatur means the 2024 amendment cannot be treated as a current nationwide click-to-cancel mandate. It did not repeal ROSCA, remove Section 5 authority, or erase other statutes, orders, and state laws that can govern recurring charges.
In March 2026, the FTC opened a new rulemaking inquiry about negative-option practices. An advance notice of proposed rulemaking asks for public input; it is not a final rule and does not itself create new binding subscription duties.
The narrower federal rule that remains
The original federal Negative Option Rule is codified at 16 C.F.R. Part 425. It addresses prenotification plans, a model in which a seller sends periodic notices identifying merchandise that will be shipped and billed unless the subscriber rejects it within a stated time.
That rule does not by itself cover every modern automatic renewal, continuity plan, or free-to-paid subscription. This narrower coverage is why ROSCA and the FTC Act remain important for online and allegedly deceptive recurring-payment practices.
Renewal notices, fake notices, and consent
A legitimate renewal notice can remind a customer that a term is ending and another charge is approaching. The notice should not be confused with the original agreement to auto-renew, and a notice requesting payment information may deserve separate scrutiny when the company already has authorization to charge an account.
Scammers also send fake renewal messages that imitate subscription providers to obtain card details or account credentials. That conduct is different from a contract dispute with a real seller. The guide on how to report a scammer explains the roles of common reporting channels.
For a real subscription, the key federal questions include what was disclosed before billing information was collected, whether the consumer gave express informed consent, and whether a simple mechanism existed to stop recurring online charges. Those questions focus on the enrollment and billing process rather than whether the consumer later used the service.
Cancellation and the timing of charges
Canceling an automatic renewal generally addresses future renewal or recurring charges. It does not necessarily rescind a completed purchase, shorten a prepaid term, or create a refund right for past service. Contract terms, the timing of cancellation, the payment method, and applicable law can affect those separate questions.
A seller’s system should distinguish a request to stop future renewal from a request for a refund. Federal law may regulate recurring billing and deception, while contract law and state consumer law can govern additional consequences.
Why state law remains important
States have enacted their own automatic-renewal and subscription laws. Depending on the jurisdiction and transaction, state law may address renewal notices, acknowledgment messages, cancellation methods, free-trial conversions, material changes, or remedies.
A federal standard does not automatically displace stronger state protections. ROSCA expressly preserves other federal and state laws except to the extent of a direct inconsistency, and a state law that provides greater consumer protection is not treated as inconsistent for that reason alone.
Automatic renewal is therefore a mixed federal-and-state subject even when the transaction occurs online. A current analysis begins with the sales channel and the negative-option structure, applies ROSCA and the FTC Act where relevant, checks the status and scope of FTC rules, and then identifies the governing state requirements without assuming they are uniform nationwide.
Sources
- 15 U.S.C. § 8403 — online negative-option marketing
- 15 U.S.C. § 8404 — FTC enforcement of ROSCA
- 15 U.S.C. § 8405 — state enforcement and preserved law
- 15 U.S.C. § 45 — unfair or deceptive acts or practices
- Custom Communications, Inc. v. Federal Trade Commission
- FTC rule concerning prenotification negative-option plans
- FTC 2026 advance notice on the Negative Option Rule
- FTC v. Uber case page