FTC’s Negative Option Rule

Short answer: the FTC’s Negative Option Rule is the federal standard for how you sell subscriptions, free-to-paid trials, and auto-renewals, and the core idea is simple: you cannot treat a customer’s silence as a “yes.” The headline “Click-to-Cancel” version of that rule was struck down by a federal appeals court in July 2025, but the statute behind it (ROSCA) and a brand new FTC rulemaking are both alive, so SaaS vendors still need to get consent and cancellation right.

The Federal Trade Commission has long policed “negative option” marketing, and every SaaS and software company that auto-renews or bundles should understand it. I represent lots of SaaS companies, and this issue shows up in almost every subscription flow we paper.

Definition: a negative option means that when someone “fails to act” (stays silent), that silence is treated as acceptance of a contract or a charge.

Why Does the FTC Care?

Some companies use this to trick consumers into paying for something without understanding the price, the renewal, or how to cancel. That is the deceptive pattern the rule was built to stop.

The FTC’s five principles are a great checklist for any subscription or renewal flow:

1. Disclose the material terms of the offer in an understandable way.
2. Make the disclosure clear and conspicuous.
3. Disclose the material terms BEFORE the consumer pays or incurs the financial obligation.
4. Obtain the consumer’s AFFIRMATIVE CONSENT to the offer.
5. Don’t impede the cancellation process.

Common examples for SaaS vendors:

• Bundling. Pairing one service or product with another that auto-renews each month with a charge.
• Free trials. A free trial that quietly converts to a paid service.
• Silent renewals. A service that auto-renews without notice (your SaaS subscription or support renewal?).

If any of those describe your product, the fix is usually in the signup and billing flow, not the fine print. We build the disclosure and the consent capture into the screen the customer actually sees, keep a record of that consent, and make the cancel path obvious. After doing hundreds of SaaS deals, the pattern that gets vendors in trouble is almost always a renewal or a trial conversion the customer did not clearly agree to. This is the same flow that carries your SaaS subscription agreement’s click-to-cancel obligations, so fix it once and you cover both.

Where the “Click-to-Cancel” Rule Stands Now (2026).

Here is the part that has changed since this post first went up. In October 2024 the FTC finalized an amended Negative Option Rule, widely called the “Click-to-Cancel” rule, which would have required (among other things) that cancelling be as easy as signing up. Just before the main compliance date, on July 8, 2025, the U.S. Court of Appeals for the Eighth Circuit vacated the entire rule. The court did not bless silent renewals. It threw the rule out on a procedural ground, holding that the FTC skipped a required preliminary analysis of the rule’s costs and benefits.

So the Click-to-Cancel rule is not in force today. That does not mean the issue went away. The FTC restarted the process: on March 11, 2026 it issued an advance notice of proposed rulemaking on negative option marketing (comments were due April 13, 2026), so a new federal rule is likely coming. In the meantime the FTC still enforces the Restore Online Shoppers’ Confidence Act (ROSCA), and a growing list of state auto-renewal laws (California’s is the strict one) apply on their own terms. For a vendor, the practical compliance bar has barely moved: clear terms, affirmative consent, easy cancellation.

Think about all of this any time you are using a customer’s silence to accept a renewal or a bundled offer. And that “affirmative consent” in principle four only counts if you actually capture it the right way: whether a clickwrap agreement holds up turns on how you built the click, not just what the screen says.

Auto-renewals and FTC compliance sit inside the broader privacy and data-protection picture for SaaS vendors. For the framework regulators expect you to bake into product design from the start, see Privacy by Design: A Framework for SaaS and Software Vendors. I hope this helps.

FTC Negative Option Rule: Common Questions.

Is the FTC Click-to-Cancel rule in effect in 2026? No. The Eighth Circuit vacated it in July 2025 on procedural grounds. The FTC issued a new advance notice of proposed rulemaking in March 2026, so a replacement rule is likely, but nothing is in force today.

Does the FTC still regulate auto-renewals without the rule? Yes. The FTC enforces negative option practices under Section 5 of the FTC Act and ROSCA, and state auto-renewal laws apply on their own terms.

What does the FTC expect in a subscription signup? Clear and conspicuous disclosure of the material terms before the charge, the customer’s affirmative consent to the offer, and an easy way to cancel.

Resources:

FTC’s Report on Negative Options (72 pages, January 2009)
ROSCA (15 U.S.C. § 8403)

Disclaimer:

This post is for informational and educational purposes only, and is not legal advice. You should hire an attorney if you need legal advice, which should be provided only after review of all relevant facts and applicable law.