The click-to-cancel Rule: What Businesses Must Fix

The click-to-cancel rule is the FTC’s push to ensure that cancelling a subscription is as easy as signing up. It targets deceptive subscription practices where users can easily enrol but struggle to cancel.

At Nocturnal Legal, we see many SaaS and subscription businesses misunderstand this shift. Even though a federal appeals court vacated the rule in 2025, the underlying compliance expectations did not disappear.

The FTC finalised the rule in 2024 to make cancellations frictionless. Courts later blocked the formal rule, but enforcement risk still exists under existing laws like the FTC Act and ROSCA.

For founders, this means one thing: your subscription UX is now a legal issue, not just a product decision.

Table of Contents

• What the click to cancel rule actually means
• Why the FTC introduced this rule
• Core compliance expectations for subscription businesses
• Current legal status and enforcement risks
• What businesses must change now
• Real examples of compliant vs non-compliant flows

What the Click to Cancel Rule Actually Means

The click-to-cancel concept is simple in principle but powerful in practice.

If a user can subscribe in one or two clicks, they should be able to cancel just as easily. Zero hidden steps. Skip forced calls. Avoid unnecessary friction.

This rule targets negative option billing, where businesses automatically charge users unless they cancel. Many companies relied on complex cancellation flows to retain customers.

Under FTC expectations, businesses must:

• Provide simple cancellation: One clear path to cancel
• Match sign-up flow: Same ease as enrollment
• Avoid hidden barriers: No forced customer service calls

This shifts cancellation from a retention tactic to a compliance requirement.

For SaaS founders, this is a major change in how subscription lifecycle design works.

Why the FTC Introduced the Rule

The FTC introduced the click-to-cancel framework due to widespread complaints about subscription traps.

Many users reported difficulty cancelling services. Some had to navigate multiple pages, wait on calls, or face misleading prompts.

The FTC found that these practices often violated consumer protection standards.

According to the FTC, the rule aimed to ensure that cancellation is as easy as sign-up.

The issue centres on deceptive practices and lack of transparency.

Common problems included:

• Hidden cancellation options: Buried in account settings
• Misleading UI flows: Confusing buttons or wording
• Forced retention tactics: Mandatory calls or chats

These practices created friction that benefited businesses but harmed consumers.

The FTC responded by tightening expectations around consent, disclosure, and cancellation.

Core Compliance Expectations for Subscription Businesses

Even without the formal rule, compliance expectations remain clear.

Businesses must follow principles tied to negative option marketing, auto-renewals, and consumer protection laws.

Key requirements

• Clear disclosures: Explain billing terms before signup
• Informed consent: Users must actively agree to charges
• Simple cancellation: No unnecessary steps or delays

What this means in practice

• No hidden fees or surprise renewals
• No pre-checked boxes for consent
• No misleading language

Businesses handling subscription models often review compliance frameworks alongside broader contract structures, especially when dealing with recurring billing and SaaS agreements through contract and compliance services.

These requirements are not new—but enforcement is increasing.

Current Legal Status and Enforcement Risks

The click-to-cancel rule was finalised in 2024 and later vacated by a federal appeals court in July 2025.

However, this does not mean businesses are safe from enforcement.

The FTC continues to enforce similar standards under:

• FTC Act Section 5: Prohibits deceptive practices
• ROSCA: Governs online subscription billing
• State laws: California, New York auto-renewal rules
• Card network rules: Visa and Mastercard compliance

This creates a layered compliance environment.

Even without the rule, regulators expect businesses to follow its principles.

Many founders assume the vacated rule removes risk. That assumption is dangerous.

To understand broader compliance risks in digital products, reviewing frameworks like those discussed in AI vendor contracts can highlight how legal exposure often comes from overlooked terms and flows.

What Subscription Businesses Must Change Now

Subscription businesses must rethink how they design user flows.

Compliance now depends heavily on UX design, not just legal language.

Key changes to implement

• Frictionless cancellation: One-click or simple flow
• Transparent billing: Clear pricing and renewal terms
• Consent tracking: Record user agreement clearly

UX and product alignment

• Match signup and cancellation complexity
• Avoid misleading prompts or dark patterns
• Provide clear confirmation of cancellation

For example:

• A compliant flow allows cancellation directly from the dashboard
• A non-compliant flow requires multiple pages and support contact

These changes reduce legal risk and improve customer trust.

They also reduce chargebacks and disputes, which directly impact revenue.

Real Examples of Compliant vs Non-Compliant Flows

Understanding compliance becomes easier with real examples.

Compliant flow

• User signs up in two clicks
• Cancellation available in account settings
• Clear “Cancel Subscription” button
• Immediate confirmation

Non-compliant flow

• Cancellation hidden across multiple pages
• Requires contacting support
• Uses confusing wording
• Delays cancellation confirmation

The difference is not technical—it is intentional design.

Businesses that prioritize transparency build stronger relationships and reduce regulatory risk.

Those that rely on friction risk enforcement actions and reputational damage.

Frequently Asked Questions

What is the FTC click to cancel rule?

The click to cancel rule requires businesses to make subscription cancellation as easy as signing up. It targets deceptive practices and ensures users can cancel without unnecessary friction.

Is the click-to-cancel rule currently in effect?

The rule was finalized in 2024 but vacated in 2025. However, similar compliance expectations still apply under existing laws like the FTC Act and ROSCA.

Do subscription businesses still need to comply?

Yes, businesses must follow transparency, consent, and cancellation standards. Enforcement continues through federal and state regulations.

What happens if a business makes cancellation difficult?

Companies may face FTC enforcement, lawsuits, chargebacks, and reputational damage. Difficult cancellation flows can be considered deceptive practices.

How can companies reduce compliance risk?

They should simplify cancellation flows, improve disclosures, track consent, and align UX with legal requirements.

Conclusion

The click to cancel rule represents a broader shift in how subscription businesses are regulated.

Even though the rule itself was vacated, its core principles remain active through existing laws and enforcement practices.

For founders, this means that subscription design is no longer just a product decision. It is a compliance obligation tied to transparency, consent, and user experience.

Businesses that simplify cancellation, improve disclosures, and align their systems with regulatory expectations reduce both legal risk and operational friction.

For companies reviewing their subscription models or compliance frameworks, evaluating how contracts, UX, and billing systems work together is essential. In many cases, aligning these elements with guidance from Nocturnal Legal can help clarify risks before they become problems.