Subscription Cancellation Laws Are Tightening: What SaaS and Subscription Businesses in Arizona, California & Texas Need to Know in 2026

If your software or subscription business makes it easy to sign up but hard to cancel, that is no longer just a customer-experience problem. In 2026, regulators, plaintiffs, payment processors, and investors are paying closer attention to whether subscription flows are clear, consensual, and easy to cancel.

Regulators have spent the last two years moving from warnings to lawsuits over what they call “dark patterns”: interface choices designed to trap users in subscriptions they no longer want. The practical compliance standard is symmetry: if customers can enroll online with minimal effort, they should generally be able to cancel online through a simple, direct process. For SaaS, app, and subscription businesses across Arizona, California, and Texas, that shift changes how your sign-up flow, your terms of service, and your billing practices all need to be built.

This guide explains what the rule requires, how it differs across the three states Accord & Shield serves, what the penalties look like, and the practical steps to get compliant before it costs you. (If you also sell to enterprise customers, it pairs closely with our look at startup contract review for California tech companies.)

What “Click-to-Cancel” Actually Means

The principle is simple to state and surprisingly easy to violate: if a customer can subscribe online in a few simple steps, the safest compliance posture is to let that customer cancel online through a process that is comparably simple, direct, and easy to find.

Patterns drawing enforcement attention include:

• One-click signup, phone-only cancellation. Subscribe instantly online, but call during business hours — and survive a retention script — to get out.
• Buried cancellation paths. The cancel option hidden several menus deep, or behind hard-to-find links.
• Forced friction. Multiple “are you sure?” screens, mandatory chat sessions, or support tickets that delay cancellation.
• Unclear renewal terms. Auto-renewing without clear, conspicuous disclosure of price, renewal date, and how to stop it.
• Negative-option traps. Free trials that silently convert to paid, or “save 50%” offers that quietly enroll the customer in ongoing charges.

The throughline is practical effect: design that delays, obscures, or frustrates the customer’s choice to leave is what draws scrutiny, regardless of how it is labeled internally.

The Federal Backdrop

Subscription practices have long been governed at the federal level by the Restore Online Shoppers’ Confidence Act (ROSCA), the FTC Act, and rules targeting negative-option marketing and unfair or deceptive practices — the framework the Federal Trade Commission uses to police auto-renewals, free-trial conversions, billing disclosures, and cancellation friction nationwide. The FTC finalized amendments to its Negative Option Rule in 2024 — the “click-to-cancel” rule — but on July 8, 2025 the U.S. Court of Appeals for the Eighth Circuit vacated those amendments in their entirety on procedural grounds, days before they were set to take full effect (Custom Communications, Inc. v. FTC, No. 24-3137 (8th Cir. 2025)). The 2024 “click-to-cancel” amendments are therefore not in effect. The vacatur left the FTC’s pre-2024 Negative Option Rule (16 C.F.R. Part 425) in force, and on February 12, 2026 the FTC issued a final rule (91 FR 6507) that formally recodified that pre-2024 rule — restoring its text as it existed before the 2024 amendments and renaming it the “Use of Prenotification Negative Option Plans” rule — to conform the Code of Federal Regulations to the Eighth Circuit’s decision. Separately, the FTC opened an advance notice of proposed rulemaking in March 2026 asking whether to amend that rule, revive provisions of the vacated 2024 rule, or take another approach. The comment period closed April 13, 2026; no further FTC action had been published as of this update. So the federal negative-option framework today rests on ROSCA, the FTC Act’s prohibition on unfair or deceptive practices, and the recodified pre-2024 rule — not the vacated 2024 amendments.

What matters for founders is that the federal layer sits on top of state law, not instead of it. Even where a federal rule is in flux, the state automatic-renewal statutes below remain in force — which is why building to the strictest applicable standard is the durable strategy.

Even apart from the FTC’s 2024 rulemaking, ROSCA remains important for online subscriptions with negative-option features. ROSCA generally requires clear and conspicuous disclosure of material terms before obtaining billing information, express informed consent before charging, and a simple mechanism for stopping recurring charges under 15 U.S.C. § 8403.

How the Three States Compare

Here is where Accord & Shield’s footprint maps directly onto the legal landscape — because the three states the firm serves sit at very different points on the spectrum.

California — the strict standard-setter

California has one of the country’s most developed and actively enforced automatic-renewal regimes, anchored by its Automatic Renewal Law (Business & Professions Code §§17600–17606, especially §17602). The AB 2863 amendments apply to contracts entered into, amended, or extended on or after July 1, 2025. For covered consumer automatic-renewal and continuous-service offers made to California consumers, California generally requires businesses to:

• Present automatic-renewal or continuous-service terms clearly and conspicuously before the subscription is fulfilled;
• Obtain the customer’s affirmative consent before charging, including for an automatic-renewal offer made at a promotional or discounted price for a limited period;
• Provide an acknowledgment that includes the renewal terms, cancellation policy, and information on how to cancel;
• Provide a simple online cancellation mechanism when the consumer accepted the offer online — a requirement that predates the federal push;
• Retain verification of the consumer’s consent for at least three years, or one year after termination, whichever is longer;
• Process online cancellation exclusively online, at will, and without further steps that obstruct or delay cancellation; any save offer must comply with the statute’s limits;
• Make cancellation available in the same medium used to enroll, and provide advance notice of material changes or fee changes as required; and
• Send renewal, trial-conversion, or reminder notices where required for certain offers, including annual reminders for annual agreements.

California enforcement has been active, and ARL violations can create exposure through public enforcement and related civil claims, including claims brought under other California consumer-protection statutes such as the Unfair Competition Law. Note that California courts have held the ARL itself does not create a simple, standalone private right of action (see Mayron v. Google LLC); related claims are typically brought under other statutes or theories. Why this matters even if you are not in California: if your product has California customers — and most subscription businesses do — you are effectively building to California’s standard whether you intended to or not.

Texas — fast-growing market, rising expectations

Texas has become a magnet for software and subscription businesses relocating or expanding, which makes its consumer-subscription rules increasingly relevant. Texas does not have California’s detailed automatic-renewal framework for ordinary SaaS subscriptions, but deceptive subscription and cancellation practices can still create risk under the Texas Deceptive Trade Practices–Consumer Protection Act (DTPA) — a broad consumer-protection tool (Tex. Bus. & Com. Code ch. 17, esp. §§17.46 and 17.50).

• The DTPA can reach false, misleading, or deceptive practices in consumer transactions, and it provides both public-enforcement and consumer-remedy pathways in appropriate cases — which raises the stakes for non-compliant flows.
• Even where Texas’s specific auto-renewal requirements are lighter than California’s, the DTPA backstop means deceptive or obstructive cancellation practices still carry real risk.

The practical takeaway: a Texas business should not assume the lighter statutory framework means lighter exposure.

Arizona — home base, and the consumer-fraud backstop

Arizona does not have California’s detailed automatic-renewal statute, but that does not make subscription practices a free-for-all. The Arizona Consumer Fraud Act (A.R.S. §44-1522) broadly prohibits deceptive, unfair, false, and misleading practices in connection with the sale or advertisement of merchandise, and the Arizona Attorney General can enforce the statute, with civil penalties for willful violations under A.R.S. §44-1531.

• Most importantly, an Arizona business with out-of-state customers is still bound by those customers’ states’ laws — so California’s standard often governs an Arizona company’s nationwide flow.

The honest bottom line for a home-state Arizona founder: your Arizona address does not shield you from California’s rules, and your own state’s consumer-fraud law still reaches genuinely deceptive cancellation design.

The Patchwork Problem — and the One Rule That Solves It

There is no single national rulebook that cleanly overrides everything else. Subscription businesses face a patchwork: a federal negative-option layer plus a growing set of state automatic-renewal laws, each with its own wrinkles on disclosure, consent, and reminder notices.

For a founder, the practical implication is counterintuitive but freeing: you generally reduce risk by building to the strictest standard that applies to any meaningful slice of your customer base — in practice, often California — while still checking for state-specific notice, timing, and exemption rules. It is rarely worth engineering different cancellation flows for different states. Build one flow that satisfies the toughest applicable rule, then keep it current as more states adopt their own versions.

This is also why “we copied a competitor’s terms” or “we used a template generator” is such a common source of risk. Those terms may not reflect the states your customers are actually in, and they rarely keep pace with how fast this area changes.

A Quick Anatomy of a “Dark Pattern”

Not every bit of friction is illegal, and not every retention offer is a dark pattern. The line falls where design stops informing the customer and starts obstructing them.

• Probably fine: A single “Are you sure? You’ll lose access on the 14th” screen with a clear “Yes, cancel” button.
• Risky: Three sequential screens, the “cancel” button greyed out for several seconds while “Keep my plan” is highlighted and pre-selected.
• Probably fine: A discount to stay, offered once, with cancellation still one click away.
• Risky: Requiring the customer to decline a series of escalating offers before “cancel” appears at all.
• Lower risk: Phone cancellation for a customer who enrolled by phone, provided the process is simple, available, and not designed to delay cancellation.
• Risky: “Call us to cancel” when signup happened in two clicks online.

The test is less about any single screen and more about the total experience: could an ordinary customer trying to leave do so without being worn down or tricked into staying? The federal United States v. Adobe, Inc. case is a useful warning. In 2026, Adobe agreed to a $150 million resolution — $75 million in civil penalties and $75 million in free services — to resolve DOJ allegations concerning online subscription enrollment and cancellation practices.

What the Penalties Actually Look Like

The downside is no longer hypothetical. Exposure generally comes in three forms:

• Regulatory enforcement. Government actions can carry significant per-violation penalties, and because each affected transaction or customer can count as a violation, the numbers scale fast for a business with thousands of subscribers. For example, the DOJ’s 2026 Adobe resolution required $75 million in civil penalties and $75 million in free services.
• Private lawsuits and class actions. Non-compliant subscription flows can attract consumer lawsuits and class actions, often framed under state unfair-competition, consumer-protection, false-advertising, restitution, or contract theories. In California, courts have held that the Automatic Renewal Law itself does not create a standalone private right of action, but ARL violations can still matter in related civil claims.
• Refund and restitution exposure. Businesses can be ordered to refund charges collected through non-compliant flows, sometimes across the entire affected customer base.

The common thread: scale cuts against you. The growth that makes a subscription business valuable is what turns a small compliance gap into a large liability, because the same flawed flow touched every customer.

What Compliant Looks Like

You do not need to eliminate every confirmation step, but cancellation should be simple, honest, and not materially harder than enrollment:

• Match the medium. Online signup means online cancellation — no phone-only escape hatch.
• Match the effort. Cancellation should take comparable steps to signup; ideally completable without contacting support.
• Disclose renewals clearly and conspicuously. Price, interval, and how to cancel — in plain language, before charging.
• Get real consent to auto-renewal. Obtain affirmative agreement to recurring charges through a clear disclosure and consent flow, and keep records showing what the customer saw and accepted.
• Send renewal and trial-conversion reminders where required. Especially for annual plans and free-to-paid conversions — and check timing rules state by state, because reminder windows vary.
• Make your terms of service match your actual flow. A TOS that promises easy cancellation while the product does the opposite is the fastest route to liability.
• Keep records. Evidence of what each customer saw and agreed to — disclosures, consent, timestamps — is your best defense.

Where the Real Risk Hides: Your Terms of Service

Most founders treat the sign-up button and the terms of service as separate projects. Regulators read them together. If your terms of service describe one cancellation process and your product delivers another, that gap is exactly what an enforcement action or class-action plaintiff points to.

Subscription compliance isn’t just a UX fix — it’s a contract-drafting issue. Your terms of service, auto-renewal disclosures, billing descriptors, and actual cancellation interface all have to tell the same story. It also tends to surface in two moments founders don’t expect: during due diligence when you raise money or sell, and when a payment processor reviews your account. Both check whether your practices match your documentation — and both can stall a deal or freeze revenue if they don’t.

Why Our California Background Shapes How We Advise Across All Three States

This is where Accord & Shield’s perspective is genuinely different. Our founder, attorney Nadine Deeb, served as in-house counsel at a SaaS technology company before founding the firm — sitting on the company side of the table in the environment where automatic-renewal and consumer-subscription law was first tested and toughened.

That matters because California’s rules are the model the rest of the country is following. Understanding where these requirements came from — and how California regulators actually read a sign-up and cancellation flow — is exactly what lets us advise an Arizona or Texas company building a single nationwide flow. You get counsel who understands the strictest standard and the home-state and Texas frameworks your business also lives under.

What Subscription Businesses Should Do Now

If you run a SaaS, app, membership, or recurring-revenue business in Arizona, California, or Texas, a short pre-emptive review is worth far more than it costs:

• Walk your own cancellation flow as a customer would, and time it against signup.
• Pull up your terms of service and check whether they describe what your product actually does.
• Confirm your auto-renewal disclosures are clear, conspicuous, and consented to.
• Map which states your customers are actually in — that determines which rules bind you.
• Check free-trial-to-paid conversions for clear advance disclosure.
• Make sure your billing descriptor and renewal cadence match what the customer agreed to.

Most exposure comes from small, fixable gaps — a phone-only cancellation, a vague renewal clause, a terms-of-service section that no longer matches the product. Inexpensive to correct now; expensive to defend later.

Frequently Asked Questions

This information is current as of August 2026. This article is provided for general informational purposes only. It is not legal advice and does not create an attorney-client relationship. Federal and state negative-option and auto-renewal rules continue to change, and the requirements that apply depend on how a business bills and where its customers are. Laws change and outcomes depend on the specific facts, the jurisdiction, and the governing documents involved. Consult qualified legal counsel about a specific situation before acting on anything described here.