Auto-Renewal and Negative Option Disclosure Checklist: A Practical Checklist

Summary. Subscription compliance is a design problem with a documentary requirement, and both halves are auditable in an afternoon. The design requirement is symmetry: whatever the signup takes in clicks, screens, seconds, and medium, cancellation takes no more. The documentary requirement is versioned screenshots of both flows, so that three years later the company can show what a particular subscriber actually saw. This checklist walks the enrollment flow element by element, then the cancellation flow with a stopwatch, then the records, governance, and metrics a regulator or plaintiff will ask for.

What this checklist is for. Auditing or designing a subscription enrollment and cancellation experience. For the legal framework, see Dark Patterns, Auto-Renewal, and the FTC Click-to-Cancel Rule.

Phase 1 — Enrollment disclosure

On the same screen as the request for billing information, in visual proximity to the consent control, visible without scrolling or clicking:

That the subscription continues automatically until cancelled.
The amount charged, and if it changes after an introductory period, the amount it becomes.
The frequency of charges.
The date or timing of the first charge.
The deadline to cancel to avoid a charge, particularly for a free trial.
How to cancel, in specific terms.
Any minimum commitment, early termination fee, or price increase — at the same prominence as the price itself.
That consent is not a condition of purchase, where applicable.
In a size, contrast, and language an ordinary consumer would notice and understand, unobscured by other elements.

The test. Show a screenshot of the enrollment page to someone unfamiliar with the product and ask them to state the price, the frequency, and how to cancel. If they cannot answer from the screen, it fails.

Phase 2 — Express informed consent

A separate affirmative act consenting to the negative option feature specifically — distinct from consent to the purchase and from acceptance of terms of service.
Nothing preselected. No pre-checked boxes, no default-on toggles.
The button or checkbox label states what is being agreed to.
No bundling with unrelated consents.
A record of what the consumer saw and clicked, with a timestamp, retained by version.

Phase 3 — Post-transaction acknowledgment

Sent promptly after enrollment.
In a retainable form — email or downloadable, not a transient screen.
Containing the automatic renewal terms, the cancellation policy, and information on how to cancel.
Retained by the company, with proof of delivery.

Phase 4 — Cancellation, audited with a stopwatch

Perform this on a phone, as a new user, from a logged-in state.

Count the clicks and screens from the account home to a completed cancellation, and compare to the count for signup.
Time it, and compare to the signup time.
Confirm cancellation is available through the same medium used to enroll — online signup means online cancellation, with no required call or chat.
Confirm the control is findable in one or two clicks from the account page, plainly labeled, and not buried in a help article.
Confirm no mandatory retention conversation. If a save offer is presented, confirm the consumer is asked whether they want to hear it and that a refusal proceeds directly to cancellation.
Confirm no required reason; a survey may be offered but may not gate the cancellation.
Confirm cancellation is effective immediately on request, with a confirmation sent and no further charges.
Confirm availability at all times, not during business hours.
Confirm it works on mobile web, in the app, and with a screen reader.
Repeat the audit for each plan type, including annual plans and plans with a commitment.

Phase 5 — Reminders and ongoing obligations

Send a reminder before a free trial converts, within the window any applicable state statute requires.
Send a renewal reminder before an annual or long-term renewal, within the applicable window — and consider doing so everywhere, because it reduces disputes and chargebacks.
Obtain new consent for any material change in the terms.
Provide notice of a price increase in advance, with the opportunity to cancel.

Phase 6 — Records

Retain versioned screenshots of the enrollment flow and the cancellation flow, with effective date ranges.
Retain the disclosure text by version.
Retain, per subscriber, the consent record with timestamp, IP address, and the version of the flow presented.
Retain the acknowledgment sent and proof of delivery.
Retain cancellation requests and their disposition.
Retain for at least the applicable limitations period, and longer in states with an extended period.

Phase 7 — Metrics and governance

Measure the cancellation completion rate — the percentage of consumers who begin cancellation and finish. A low rate is a fact pattern.
Measure time to cancel.
Measure trial conversion without product use, which indicates consumers who forgot.
Measure chargebacks and disputes citing "did not authorize" or "could not cancel."
Report these alongside conversion metrics, to the same executives.
Require legal review of the flows as shipped, not as specified, at every material change.
Require compliance review of A/B tests before they run. A test that makes cancellation harder is a decision to violate the law and measure the benefit.
Search the product and growth channels for "friction," "save rate," and "deflection." If a document proposes making cancellation harder, change the flow.
Maintain a state requirements matrix and refresh it annually.

Phase 8 — State-specific requirements

California requires clear and conspicuous presentation in visual proximity to the request for consent, affirmative consent to the automatic renewal terms specifically, a retainable acknowledgment, a cost-effective, timely, and easy-to-use cancellation mechanism, the ability to cancel exclusively online where the consumer accepted online, renewal and trial reminders, and new consent for material changes. The remedy provision deems goods or services provided in violation an unconditional gift, and violations support Unfair Competition Law and Consumers Legal Remedies Act claims.
New York, Colorado, Illinois, Oregon, Virginia, and a growing list impose their own disclosure, reminder, and cancellation requirements with differing thresholds and windows.
Determine every state where you have subscribers and build to the strictest requirement.
Check whether the applicable statute reaches business-to-business transactions; most do not, but evergreen renewal notice statutes exist for commercial contracts in several states.

Phase 9 — Adjacent obligations

Total price display. Show the total inclusive of mandatory fees wherever a price first appears, consistent with the FTC's fees rule for covered sectors and with state statutes such as California's, which reaches essentially all consumer transactions.
Telemarketed negative options require express informed consent under the Telemarketing Sales Rule, with specific disclosures and, for free-to-pay conversions using preacquired account information, an audio recording.
Privacy consent symmetry — if "Accept All" is one click, "Reject All" must be one click.
Payment network rules — trial-conversion notifications, receipts identifying the subscription, cancellation instructions in the receipt, and descriptor formats. Non-compliance produces fines and processing risk faster than any enforcement action.
App store subscriptions are cancelled through the store, which satisfies same-medium cancellation for store-billed subscriptions but not for subscriptions sold on the web.

Common mistakes

Disclosures behind a link rather than in visual proximity to the consent control.
A single consent covering the purchase, the terms of service, and the subscription.
A preselected box or a default-on toggle.
No retainable acknowledgment after enrollment.
Online signup, phone-only cancellation.
Retention offers presented without asking, and a "no" that does not proceed to cancellation.
A cancellation control buried in a help center article.
No versioned screenshots, so a 2023 subscriber's experience cannot be reconstructed.
Early termination fees disclosed on hover rather than on the page.
A growth team A/B testing cancellation friction, in writing.

Primary authority

ROSCA, 15 U.S.C. §§ 8401–8405, particularly § 8403.
FTC Act § 5, 15 U.S.C. § 45, and the Commission's negative option rulemaking at 16 C.F.R. Part 425, the status of which has been affected by litigation.
Telemarketing Sales Rule, 16 C.F.R. Part 310.
California Automatic Renewal Law, Cal. Bus. & Prof. Code § 17600 et seq., with remedies under § 17200 and Cal. Civ. Code § 1750 et seq.
AMG Capital Management, LLC v. FTC, 593 U.S. 67 (2021).
Federal: 15 U.S.C. § 8403 (ROSCA: clear and conspicuous disclosure, express informed consent, simple cancellation), § 8404 (enforcement as an FTC Act violation); 15 U.S.C. § 45(a) and § 45(m)(1)(A) (civil penalties); 16 C.F.R. Part 425 (Negative Option Rule), noting Custom Communications, Inc. v. FTC, No. 24-1732 (8th Cir. July 8, 2025), which vacated the 2024 amendments; 16 C.F.R. § 310.3(a)(1)(vii) (telemarketing negative options); 39 U.S.C. § 3009 (unordered merchandise).
Remedial limits: AMG Capital Management, LLC v. FTC, 593 U.S. 67 (2021) — no equitable monetary relief under § 13(b), which is why rule and ROSCA theories now carry the penalties.
State automatic renewal statutes: Cal. Bus. & Prof. Code §§ 17600–17606 (as amended by AB 2863); N.Y. Gen. Bus. Law § 527-a; Colo. Rev. Stat. § 6-1-732; Ill. Comp. Stat. ch. 815 § 601/10; Or. Rev. Stat. § 646A.295; Va. Code § 59.1-207.46; D.C. Code § 28-3903.
Payments: 15 U.S.C. § 1693e and 12 C.F.R. § 1005.10(b) (preauthorized electronic fund transfers and the written authorization requirement); network chargeback rules for recurring billing.
Guidance: FTC, Bringing Dark Patterns to Light (Sept. 2022); FTC, .com Disclosures (2013).

This checklist is educational and not legal advice. The federal negative option rule has been the subject of litigation and its status may have changed, and state automatic renewal statutes differ materially in requirements and remedies. Consult qualified counsel before designing or modifying a subscription flow.