By E-commerce 4 Internet Marketers Editorial
Explainer. Website owners and developers who run autoship, continuity, free-trial-to-pay, and subscription catalogs for supplements and other high-risk goods still face Federal Trade Commission (FTC) negative-option enforcement even though the 2024 “Click-to-Cancel” amendments are not in force. Online sellers must meet the Restore Online Shoppers’ Confidence Act (ROSCA), Section 5 of the FTC Act, and the agency’s published negative-option enforcement priorities on clear disclosures, express informed consent, and simple cancellation. This article maps those practical expectations against primary sources and states what the vacated 2024 rule is not. It is not legal advice. Prefer FTC and U.S. Code primary materials over secondary summaries. Never invent effective dates or treat vacated Click-to-Cancel text as current Code of Federal Regulations (CFR) requirements.
What still binds online autoship sellers today
Three federal layers matter for most ecommerce continuity brands:
- ROSCA (15 U.S.C. § 8401-8405). For goods or services sold in an Internet transaction through a “negative option feature,” it is unlawful to charge or attempt to charge a consumer unless the seller (a) provides text that clearly and conspicuously discloses all material terms before obtaining billing information, (b) obtains the consumer’s express informed consent before charging, and (c) provides simple mechanisms for the consumer to stop recurring charges. ROSCA incorporates the Telemarketing Sales Rule definition of “negative option feature” at 16 CFR 310.2. The FTC ROSCA statute page and 15 U.S.C. 8403 are the controlling texts for online negative-option charging.
- Section 5 of the FTC Act (15 U.S.C. § 45). Unfair or deceptive acts or practices remain independently actionable. The Commission’s Enforcement Policy Statement Regarding Negative Option Marketing (October 2021) restates four Section 5 baselines the agency has long used in cases: disclose material negative-option terms clearly and conspicuously; disclose them before the consumer agrees to buy; obtain the consumer’s affirmative informed consent; and do not impede promised cancellation procedures.
- The prenotification Negative Option Rule (16 CFR part 425). After court vacatur, the FTC’s February 12, 2026 final rule recodified part 425 as it existed before the 2024 amendments and restored the title “Use of Prenotification Negative Option Plans.” That older rule covers classic prenotification plans (seller announces a selection in advance; silence equals acceptance). It does not itself write modern Shopify or WooCommerce autoship checkout rules. Continuity and subscription storefronts still sit primarily under ROSCA and Section 5.
Telemarketing Sales Rule negative-option provisions can also apply when offers are made by telephone. State automatic-renewal statutes often add more prescriptive checkout and cancel requirements. This article stays with verified federal FTC materials.
Click-to-Cancel status (do not treat as live CFR law)
In October 2024 the FTC announced final amendments popularly called the Click-to-Cancel rule, published in the Federal Register on November 15, 2024 (89 FR 90476). Those amendments would have expanded part 425 to nearly all negative-option programs in any media and, among other things, would have prohibited material misrepresentations, required clear disclosures before obtaining billing information, required unambiguously affirmative consent before charging, and required a simple cancellation mechanism at least as easy as signup. The published effective date was January 14, 2025, with deferred compliance for §§ 425.4-425.6 originally set for May 14, 2025 and later deferred to July 14, 2025.
On July 8, 2025, the U.S. Court of Appeals for the Eighth Circuit vacated that amended Rule in full in Custom Communications, Inc. v. FTC, 142 F.4th 1060 (8th Cir. 2025), holding that the Commission failed to issue a required preliminary regulatory analysis under section 22 of the FTC Act. The court opinion is primary. The FTC’s own March 13, 2026 Advance Notice of Proposed Rulemaking (ANPRM) states that the vacatur reinstated the prior prenotification version of the Rule.
On February 12, 2026, the Commission published a final rule (91 FR 6507; document 2026-02866), effective that same day, to recodify the Negative Option Rule text as it existed before the 2024 amendments, including restoring the prenotification rule title. On March 13, 2026, the Commission published an ANPRM seeking comment on whether and how to amend the prenotification Rule again. Comments were due April 13, 2026. As of the sources verified for this draft, that ANPRM is a request for comment, not a binding replacement Click-to-Cancel rule.
Operational takeaway. Do not code checkout or cancel UX as if 16 CFR 425.4-425.6 from the vacated 2024 amendments are currently enforceable CFR text. Do code for ROSCA, Section 5, the 2021 Enforcement Policy Statement, and any applicable state automatic-renewal law. Treat the vacated rule’s themes (disclosure, consent, easy cancel) as a useful map of enforcement priorities, not as live federal regulation.
Disclosure expectations for continuity checkouts
ROSCA requires clear and conspicuous disclosure of all material terms of the transaction before the seller obtains the consumer’s billing information. The 2021 Enforcement Policy Statement aligns Section 5 disclosure practice with that standard and lists minimum terms sellers should disclose, including:
- Material terms about the underlying product or service needed to prevent deception.
- That the consumer will be charged (or that charges will increase after a trial), and that charges will recur unless the consumer timely stops them.
- Each deadline (by date or frequency) by which the consumer must act to stop charges.
- The amount or range of costs, and the frequency of recurring charges.
- The date or dates each charge will be submitted for payment.
- All information necessary to cancel.
“Clear and conspicuous” in the Policy Statement means disclosures should be difficult to miss or unavoidable and easily understandable. On interactive electronic media, a disclosure is not clear and conspicuous if the consumer must click a hyperlink or hover over an icon to see it. Negative-option-related written disclosures should appear immediately adjacent to the means of recording consent for the negative option feature. Disclosures must not be contradicted by later pages, buried fine print, or mitigated by conflicting claims on ads or landing pages.
Storefront practice for autoship brands.
- Put the fact of autoship or subscription, price after any trial, billing frequency, next charge date logic, and how to cancel in plain text next to the consent control, not only in a linked Terms of Service.
- Match ad and landing-page “free bottle” or “risk-free trial” claims to the checkout terms the customer actually accepts.
- Do not rely on a pre-checked box, tiny footnote, or footer-only cancel URL as the disclosure.
Express informed consent (not a bundled afterthought)
ROSCA requires express informed consent before charging. The Policy Statement says negative-option sellers should, among other things:
- Obtain acceptance of the negative option feature separately from other parts of the transaction.
- Avoid information that interferes with, detracts from, contradicts, or undermines consent.
- Obtain unambiguously affirmative consent to the negative option feature (a pre-checked box does not qualify).
- Clearly disclose the name of the billing entity authorized by the consent.
- Obtain unambiguously affirmative consent to the entire transaction.
- Be able to verify the consumer’s consent.
For free-trial-to-pay and “first shipment discounted, then full autoship” funnels common in nutraceutical carts, that means a distinct affirmative control for the recurring feature, not only a general “Place order” button that silently opts the buyer into continuity.
Storefront practice.
- Use an unchecked checkbox or equivalent affirmative control labeled with the recurring price and frequency.
- Log consent timestamp, IP or device context as your counsel advises, offer version, and the exact disclosure text shown.
- Keep consent copy adjacent to price and cancel information. Do not hide the recurring feature behind an upsell modal that disappears after click.
Simple cancellation and "easy cancel" enforcement priorities
ROSCA requires simple mechanisms to stop recurring charges. The Policy Statement elaborates that cancellation should be at least as easy to use as the method used to start the negative option, offered at least through the same medium (for example, the same website or app), and free of unreasonable delays from save offers. Multiple forced pitches, lengthy holds, false cancel instructions, ignored cancel requests, or making online buyers call a phone queue they never used to sign up are examples of practices the Policy Statement flags as problems under Section 5 and ROSCA.
The vacated 2024 amendments would have hard-coded a “simple mechanism” and “at least as simple as initiation” standard into part 425. Those CFR sections are not in force. Easy-cancel design remains a live ROSCA and Section 5 risk, and it remains a theme in the FTC’s March 2026 ANPRM record, which notes thousands of consumer complaints per year and continued case activity.
Storefront practice for continuity sellers.
- Offer account-authenticated cancel (or guest cancel with order email and ZIP) in the same online channel used for signup.
- Make the cancel control findable from account, order confirmation, and subscription management pages without hunting through chat scripts.
- If you present a retention offer, do not block cancel behind multiple mandatory pitches. Process the stop-charge request promptly once the consumer confirms cancel.
- Halt future charges when cancel succeeds. Do not leave “pending” autoship cycles that bill again after a completed cancel confirmation.
Why this matters for supplements and other high-risk catalogs
Autoship and continuity billing are common in supplements, nutraceuticals, and adjacent high-risk verticals because of refill economics. Those same funnels attract FTC scrutiny when trial-to-paid conversions, shipping upsells, or prepaid card flows obscure recurring terms. Payment processors and high-risk acquirers also treat difficult cancel flows and surprise renewals as chargeback and underwriting risk. Building ROSCA-aligned disclosure, consent, and cancel paths is both a consumer-protection control and an account-stability control.
Developers should treat subscription objects, consent records, and cancel APIs as first-class catalog features, not as marketing afterthoughts bolted onto a one-time checkout theme.
Implementation checklist for website owners and developers
- Map every negative-option SKU. Flag free-trial-to-pay, prepaid multi-bottle, monthly autoship, and subscribe-and-save variants in the product catalog.
- Checkout disclosure block. Render material terms (recurring amount, frequency, trial end, cancel method) adjacent to the consent control before collecting or confirming billing credentials.
- Separate affirmative consent. Require an unchecked control for the negative-option feature. Store verifiable consent artifacts.
- Same-medium cancel. Ship a web cancel path that is no harder than web signup. Document phone cancel only as an addition, not as the sole path for online buyers.
- Immediate halt. Wire cancel success to stop the next gateway charge and to cancel open fulfillment where business rules allow.
- Ad-to-checkout consistency. QA paid ads, PDPs, and email against checkout terms so “free” or “cancel anytime” claims match the mechanism that actually exists.
- State ARL overlay. After federal baselines, have counsel map California, New York, and other automatic-renewal statutes that ship-to destinations trigger. This article does not inventory those state rules.
- Watch the ANPRM docket. The FTC’s Negative Option Rule page hosts the March 13, 2026 ANPRM and related Federal Register notices. New proposed text would need its own comment period and final rule before creating new CFR duties.
What this article deliberately omits
- Any claim that the vacated 2024 Click-to-Cancel amendments (§ 425.3-425.6 as amended) are currently enforceable CFR requirements.
- Invented effective dates for a replacement nationwide Click-to-Cancel rule after the April 13, 2026 ANPRM comment deadline.
- A 50-state automatic-renewal statute matrix.
- Case-by-case predictions about civil penalty amounts in future FTC actions.
- Legal advice on whether a specific cart theme, checkbox copy, or save-offer script complies.
Those omissions keep the North Star clear. Continuity sellers need maintainable disclosure, consent, and cancel systems tied to ROSCA, Section 5, and the FTC’s published enforcement policy, while tracking whether a future Negative Option Rule amendment actually becomes final law.
Sources
- FTC Negative Option Rule library page
- FTC press release, Final Click-to-Cancel Rule (Oct. 16, 2024)
- FTC Business Blog, Click to Cancel (Oct. 16, 2024)
- Federal Register, Negative Option Rule final amendments (Nov. 15, 2024), 89 FR 90476
- Custom Communications, Inc. v. FTC, 142 F.4th 1060 (8th Cir. July 8, 2025) opinion PDF
- Federal Register, Revision of the Negative Option Rule (Feb. 12, 2026), 91 FR 6507, doc. 2026-02866
- Federal Register, Negative Option Rule ANPRM (Mar. 13, 2026), doc. 2026-04952
- FTC ANPRM PDF (P064202)
- FTC Enforcement Policy Statement Regarding Negative Option Marketing (Oct. 2021)
- Restore Online Shoppers’ Confidence Act (FTC statute page)
- 15 U.S.C. § 8403 (negative option marketing on the Internet)