Automatic renewal laws: what sign-up and cancellation flows have to show

An automatic renewal, sometimes called a negative option, is an arrangement in which the customer's silence is treated as agreement to keep paying. Streaming services, meal kits, gym memberships, software plans and free trials that convert to paid plans all work this way.

A Benesch survey dated 14 August 2026 counts 28 states and the District of Columbia with automatic-renewal laws or regulations. It names Maryland in 2025, Louisiana in 2026 and Virginia's 2026 amendments as recent additions, and it lists five states with bills pending in the 2026 session: Massachusetts, Michigan, New Jersey, New York and Pennsylvania.

These laws usually protect consumers, though that boundary is moving. Benesch notes that Virginia's 2026 amendments treat small businesses as consumers, which it expects to bring business-to-business subscriptions into dispute.

A seller that takes orders online has customers in many states at once. The practical result is that the strictest state law a business sells into tends to set the design of its whole flow.

State statutes differ in wording, and this guide does not restate each one. The disputes, though, concentrate on a small number of moments. A California practitioner who reviewed roughly two dozen complaints filed between October 2024 and early 2026 writes that the cases turn on logs of the consent timestamp, the disclosure version served, acknowledgment delivery and pre-renewal notice delivery. That source is a single lawyer who also sells demand-letter templates, so treat it as one informed view.

Those four log entries map onto four duties at and after checkout: tell the customer the terms, get their agreement, confirm it in a form they can keep, and remind them before a renewal where the law calls for a reminder.

The common complaint in recent suits is simple. Benesch describes at least 12 consumer class actions filed against online retailers within a few weeks around September 2025, all alleging that the plaintiffs were enrolled in subscriptions they thought were one-time purchases. A checkout where the recurring charge is easy to miss is the pattern those suits describe.

Cancellation is where the phrase click to cancel comes from. The principle is that a customer who subscribed online in a minute should not have to phone a call center during business hours to leave.

California's amended law puts this in terms of medium. As summarized by the law firm Davis+Gilbert, the amendments add same-medium cancellation: a customer who signed up online must be able to cancel online.

Local rules are appearing alongside state ones. A tracker published by the billing vendor Chargebee lists a New York City click-to-cancel rule as in effect from 1 October 2026 and a Louisiana act expected on 1 January 2027. That is a vendor's summary, so confirm the dates against the official text before acting on them.

The amendments were made by Assembly Bill 2863, signed in September 2024. According to Davis+Gilbert's summary, the amended law governs contracts entered into, amended or extended on or after 1 July 2025.

Three additions matter most for a subscription flow: cancellation in the same medium as sign-up, an annual reminder to subscribers, and advance notice before a fee changes. Each of the three creates something that has to be sent or made available, and so each creates something a business may later need to show it did.

California also matters because of where cases are filed. Benesch calls California and Illinois the primary terrain of private class action filings over subscriptions.

The FTC finalized amendments to its Negative Option Rule that would have set a federal click-to-cancel standard. The Eighth Circuit vacated them on 8 July 2025 on procedural grounds, as reported by the law firm Greenberg Traurig.

According to a Covington summary, the FTC restored the earlier rule text in February 2026 and issued an advance notice of proposed rulemaking on 11 March 2026, published in the Federal Register on 13 March 2026. An advance notice asks questions; it does not impose requirements. The research behind this guide found no proposed rule after it.

The vacatur did not reduce state exposure, and it did not stop federal enforcement. The FTC continues to bring subscription cases under the Restore Online Shoppers' Confidence Act, known as ROSCA, described in the next section.

Federal enforcement has produced the largest numbers. The FTC's case against Amazon over Prime enrollment and cancellation settled in September 2025 for 2.5 billion US dollars, made up of a 1 billion dollar civil penalty and 1.5 billion dollars in refunds, as reported by Cobalt Law. A Goodwin alert from February 2026 lists a 7.5 million dollar settlement with Chegg in September 2025 and pending FTC complaints against Uber and LA Fitness.

In California, a task force of district attorneys and the Santa Monica City Attorney brings cases under the state law. Benesch reports a consent judgment with HelloFresh on 18 August 2025 for 7.5 million dollars.

Private suits take an indirect route in California. Benesch explains that after the Mayron v. Google decision the state's automatic-renewal law has no direct private right of action, so plaintiffs sue through the Unfair Competition Law and the Consumers Legal Remedies Act. Benesch counts at least 17 jurisdictions that allow a class claim based on a noncompliant renewal practice.

Many disputes start before any filing. An April 2026 article from the law firm Jeffer Mangels describes a steady influx of demand letters that also serve as the 30-day notice required before a Consumers Legal Remedies Act claim, sent to meal kits, streaming services, gyms and other subscription businesses. No source in the research counts these letters or suits per year.

A flow that follows the law today does not prove what a customer saw eight months ago. Checkout pages change with every pricing test and redesign, so the record has to capture the version each subscriber was shown.

The records below follow the four log types the California practitioner identifies, with cancellation added. They are also the first things a business would need in order to respond to a demand letter with facts.

Consentra's Renewal Check audits sign-up and cancellation flows against state automatic-renewal laws and keeps a dated log per subscriber. Whether a given state's law applies to your subscription is a question for your counsel.

• The disclosure text and layout as shown at checkout, with a version identifier
• The consent action, with date, time, account and device details
• The confirmation message and proof it was delivered
• Each reminder or price-change notice, with content and delivery status
• Each cancellation request, the channel it came through, and the date billing stopped
• Any retention offer shown before the cancellation was completed, and the customer response
• A dated history of changes to the checkout and cancellation pages