FTC Click-to-Cancel Rule Compliance: What DTC and SaaS Startups Must Do Now

What the FTC's Negative Option Rule Required

On October 16, 2024, the Federal Trade Commission announced its final "Click-to-Cancel" Rule, amending the agency's decades-old Negative Option Rule to address modern subscription practices. The rule defined four specific practices as unfair or deceptive under Section 5 of the FTC Act: making material misrepresentations about the negative option or underlying product, failing to clearly and conspicuously disclose all material terms before obtaining billing information, failing to obtain express informed consent to the negative option feature separately from the rest of the transaction, and failing to provide a simple cancellation mechanism that is at least as easy to use as the sign-up mechanism and through the same medium. The rule covered all "negative option features" — any arrangement where a consumer's silence or failure to act is treated as acceptance. That includes automatic renewals, continuity plans, prenotification plans, and free-trial-to-paid conversions. If your DTC brand runs a subscription box, your SaaS startup offers a free trial that converts to paid, or your fitness app auto-renews monthly, this rule was aimed at you.

At the time, FTC Chair Lina Khan framed the rule as ending "tricks and traps" that trap consumers in unwanted subscriptions. The rule's misrepresentation provisions were set to take effect 60 days after publication in the Federal Register, with the disclosure, consent, and click-to-cancel provisions following at 180 days. The final rule was published in the Federal Register on November 15, 2024, putting the full compliance deadline at May 14, 2025.

The Eighth Circuit Vacated the Rule — But the Requirements Didn't Disappear

On July 8, 2025, the U.S. Court of Appeals for the Eighth Circuit vacated the Click-to-Cancel Rule entirely, holding that the FTC failed to comply with procedural requirements governing its rulemaking and deprived petitioners — various industry associations and businesses — of a fair opportunity to participate in the process. The rule would have become effective July 14, 2025, just days after the court's decision. Instead, it was struck down before it could be enforced as a standalone regulation.

But here's the critical point for founders: the FTC has not stopped enforcing these requirements. The agency is using other legal tools — principally the Restore Online Shoppers' Confidence Act (ROSCA) and Section 5 of the FTC Act — to pursue the same outcomes the rule would have mandated. And as we discuss in our earlier deep dive on subscription billing compliance under ROSCA, these enforcement mechanisms predate the Click-to-Cancel Rule and remain fully in force.

How the FTC Is Enforcing After the Vacatur

Despite the rule's demise, the FTC has continued aggressive enforcement against companies with problematic subscription practices. Recent enforcement actions establish a de facto compliance roadmap that mirrors what the Click-to-Cancel Rule would have required:

Match.com — $14 Million Settlement

The FTC alleged that Match.com deceptively induced consumers to subscribe by promising a complimentary six-month subscription without adequately disclosing the requirements, unfairly suspended accounts of users who disputed charges, and made cancellation procedures confusing and cumbersome. The $14 million settlement requires Match.com to clearly disclose all material terms, refrain from misrepresenting restrictions, cease retaliatory actions against consumers who file billing disputes, and provide simple, accessible cancellation methods.

Chegg — $7.5 Million Settlement

The FTC's settlement with Chegg, an education technology provider, resolved allegations that the company continued to charge consumers after they had attempted to cancel, made online cancellation options difficult to locate, created a confusing and cumbersome cancellation process, and failed to improve cancellation accessibility even after being notified of consumer difficulties. The settlement requires that the online cancellation mechanism be easy to find and that Chegg promptly process cancellation requests.

Amazon Prime — $2.5 Billion Settlement

Most significantly, the FTC announced a settlement with Amazon in the midst of its trial in the U.S. District Court for the Western District of Washington. The settlement requires Amazon to pay $2.5 billion in monetary relief and civil penalties and mandates sweeping changes to its Prime enrollment and cancellation processes. The order requires Amazon to include a clear option for customers to decline membership not obscured by retention offers, use language characterizing Prime as a membership, indicate that the membership "renews" or use similar language on all sign-up pages, and always disclose the price and auto-renewal feature on the sign-up page. Notably, the order states that if the FTC promulgates a new rule governing negative options, that rule's requirements will supersede these terms — suggesting the agency may try again with a properly drafted regulation.

State Laws Are Filling the Gap

Even if federal rulemaking stalls, more than half of U.S. states have automatic renewal laws on the books, many as strict or stricter than the FTC's vacated rule. California's amended auto-renewal law, effective July 1, 2025, is among the most aggressive. It requires:

• Express affirmative consent — businesses must obtain customers' express affirmative consent to auto-renewal terms, preferably through a separate checkbox or similar mechanism that customers must affirmatively select to accept only the auto-renewal terms
• Retention offer rules — when customers request to cancel online, businesses may offer retention promotions only if a "cancel" button is simultaneously displayed in a prominent and proximate location; if the cancel button is clicked, the cancellation must be processed promptly without obstruction or delay
• Price change notice — if the price of an existing subscription changes, businesses must provide clear and conspicuous notice 7 to 30 days before the change takes effect, including information on how to cancel
• Annual reminders — for subscriptions that renew annually, businesses must send an annual reminder disclosing what is being renewed, the frequency and amount of charges, and how to cancel

Colorado, New York, Illinois, and other states have enacted or amended similar requirements. If your customers are in these states — and for most DTC brands and SaaS startups, they are — you need to comply with these state-level mandates regardless of what happens at the federal level.

What This Means for Your Subscription Flow

For DTC brands and SaaS startups, the compliance landscape is arguably more complex now than if the Click-to-Cancel Rule had simply taken effect. You need to satisfy FTC enforcement expectations under ROSCA and Section 5, comply with a patchwork of state automatic renewal laws, and manage consumer class action risk under state UDAP statutes that often mirror the same practices the FTC targets.

Free Trials That Convert to Paid

The FTC's enforcement actions make clear that free-trial-to-paid conversions require explicit, informed consent before any billing begins. This means you cannot bury the fact that a trial will convert to a paid subscription in fine print or require consumers to hunt for the conversion terms. The disclosure must be clear and conspicuous, presented before the consumer provides billing information, and the consumer must affirmatively consent to the negative option feature — not just to the overall purchase. A separately presented checkbox for the auto-renewal terms is the gold standard, as California's law now requires and as the FTC has effectively demanded through its settlements.

Cancellation Flows

The core principle the FTC has enforced across Match.com, Chegg, and Amazon is that cancellation must be as easy as sign-up. If a consumer signs up online in three clicks, they should be able to cancel online in a comparable number of clicks. You cannot require a phone call to cancel an online subscription. You cannot bury the cancel button behind multiple retention offer screens. You cannot impose processing delays. And if you present retention offers during the cancellation flow, the cancel option must remain prominent and immediately accessible — a lesson reinforced by both the Amazon settlement and California's amended law.

Disclosure and Consent Requirements

Every sign-up page for an auto-renewing subscription must clearly disclose the price, the renewal frequency, the fact that the subscription auto-renews, and the cancellation mechanism. The FTC's Amazon settlement specifically requires that the price and auto-renewal feature appear on the sign-up page itself — not in a linked terms page or a footnote. Consent to the auto-renewal terms must be obtained separately from consent to the initial purchase, through a mechanism like a checkbox that the consumer must affirmatively select.

If you operate in multiple states, you also need to account for varying disclosure timing requirements, price-change notification rules, and annual reminder mandates. For a comprehensive look at how ROSCA and state laws interact, see our earlier guide to navigating the FTC's click-to-cancel framework.

Class Action Risk Under State UDAP Statutes

Beyond FTC enforcement and state attorney general actions, consumer class actions are an escalating risk. Plaintiffs' attorneys are actively filing suits under state unfair and deceptive acts and practices (UDAP) statutes based on the same subscription practices the FTC has targeted — hidden cancel buttons, post-cancellation charges, confusing trial disclosures, and retention-offer dark patterns. These cases can be filed in any state where your customers reside, and many state UDAP statutes provide for statutory damages, attorneys' fees, and injunctive relief. The FTC's recent settlements effectively provide a roadmap for plaintiffs' attorneys: if the FTC alleges that a company's cancellation flow was "confusing and cumbersome," class action lawyers will cite that same language in their complaints.

This is not theoretical. The same practices that drew FTC enforcement against Match.com, Chegg, and Amazon have generated parallel class action litigation in federal and state courts. And unlike FTC enforcement — which requires agency resources and prioritization — class actions can be filed by any plaintiffs' firm that identifies a non-compliant subscription flow. For early-stage companies, a single class action can be existential.

Actionable Next Steps

1. Audit your current subscription flow end-to-end. Walk through your sign-up process as a new customer would. Is the auto-renewal disclosure clear and conspicuous on the sign-up page? Is there a separate consent mechanism for the negative option? Can a consumer cancel in the same number of clicks it took to sign up, through the same medium?
2. Implement a one-click cancel mechanism. Even though the Click-to-Cancel Rule was vacated, the FTC's enforcement actions and state laws effectively require it. If you signed them up online, let them cancel online — no phone calls, no chatbots-only, no buried menus.
3. Review your free trial conversion disclosures. Ensure that the fact the trial converts to a paid subscription, the price after the trial, the billing frequency, and the cancellation mechanism are all disclosed before the consumer enters billing information. Use a separate checkbox for auto-renewal consent.
4. Fix retention offer dark patterns. If you present retention offers during the cancellation flow, ensure the cancel button remains prominent and immediately accessible. Do not obscure the cancel option behind multiple screens or pop-ups.
5. Map your state compliance obligations. Identify which states your customers are in and determine which automatic renewal laws apply. Pay special attention to California, Colorado, New York, and any state where you have significant customer concentration.
6. Set up price-change notifications and annual reminders. If you operate in California or other states with these requirements, build the notification infrastructure now rather than waiting for an enforcement action.
7. Document your compliance efforts. Keep records of your disclosure language, consent mechanisms, and cancellation flow design decisions. If you are investigated or sued, demonstrating good-faith compliance efforts matters.
8. Get legal review of your subscription terms and UX. Have counsel experienced in consumer protection and FTC enforcement review your subscription flow before you scale. The cost of a compliance audit is a fraction of what a single FTC investigation or class action will cost. Just as we recommend reviewing your FTC endorsement compliance, your subscription billing practices deserve the same scrutiny.

The Click-to-Cancel Rule may be gone, but the compliance expectations it codified are very much alive. The FTC is enforcing them through settlements, state attorneys general are enforcing them through their own laws, and plaintiffs' attorneys are enforcing them through class actions. For DTC brands and SaaS startups, the question is not whether to comply — it's whether you'll do it proactively or wait for an enforcement action to force your hand.