New Subscription Compliance Rules Go Live

Midyear changes in automatic-renewal laws, children’s privacy, federal negative-option policy, and messaging rules give subscription operators several compliance issues to track.

Several subscription-related rules and deadlines have moved from watch list to operating issue.

New and updated requirements are now live or newly relevant in Maryland, New Jersey, Connecticut, and Virginia. Federal children’s privacy amendments are now part of the current compliance framework. Federal negative-option policy is still unsettled for operators trying to separate current requirements from the FTC’s vacated 2024 Click-to-Cancel Rule and its new rulemaking process.

That is a lot for one quarter. Nobody asked compliance to become a summer reading list, but here we are.

These are not the only developments in subscription compliance. They are among the items most likely to affect operating workflows now or in the near term.

The businesses affected may include digital subscriptions, memberships, apps, health clubs, services using recurring payments, products used by children or families, and companies that send subscription-related calls or texts.

What changed

• Maryland’s new automatic-renewal law took effect June 1, 2026. The law covers renewal disclosures, free-trial and long-term renewal notices, credit-card consent, cancellation access, authentication, and conduct that may delay or obstruct cancellation. Maryland SB 49
• New Jersey added health club ownership-transfer rules. The official bill text says the act takes effect immediately and applies to health club services contracts entered into on or after that date. The requirements address ownership transfers, business-name changes, billing-entity changes, contract assignment, cancellation or nullification rights, and refunds. New Jersey S3306
• Connecticut’s July 1, 2026 automatic-renewal amendments are now in effect. They affect annual reminders, cancellation methods, telephone cancellation handling, retention offers, cancellation obstruction, and enforcement under the Connecticut Unfair Trade Practices Act. Connecticut Public Act 25-44
• Virginia’s July 1, 2026 automatic-renewal and continuous-service amendments are also in effect. The current law calls for closer review of disclosures, consent, acknowledgments, cancellation access, trial notices, long-term renewal notices, material changes, small-business coverage, and enforcement. Virginia Code § 59.1-207.45
• Federal children’s privacy is part of the same midyear picture. The FTC’s amended COPPA Rule is now part of the current compliance framework, with most covered entities required to comply by April 22, 2026. FTC COPPA Final Rule Amendments
• Federal negative-option policy remains unsettled. The FTC’s broad 2024 Click-to-Cancel Rule is not in force after the U.S. Court of Appeals for the Eighth Circuit vacated it in July 2025. The FTC has restored the narrower prenotification Negative Option Rule and opened a new rulemaking process through an advance notice of proposed rulemaking. FTC Negative Option Rule

Why it matters

The common thread is operational.

These laws and regulatory developments can affect the work that happens before, during, and after a subscription sale. That includes how renewal terms are shown, how consent is captured, how cancellation is made available, how notices are timed, how customer-service teams respond, and how billing or messaging vendors act on customer requests.

That is where things get messy.

A business may understand the law and still trip in the handoff. The offer may be clear, but the cancellation method may not match the enrollment path. The renewal notice may be drafted, but the system may not know which customers should receive it. A customer may ask to cancel, while a billing platform, call center, or messaging vendor still treats the account as active.

Those gaps are where compliance risk becomes customer trust risk.

The practical question is simple: do the teams that own enrollment, billing, cancellation, messaging, privacy, and support know which rules affect their part of the customer journey?

What operators should watch 

Some of these changes are current requirements. Others are proposals, delayed requirements, or unsettled federal developments that operators should monitor but not treat as final law.

• The FTC’s new negative-option rulemaking could shape the next phase of federal subscription policy. The March 2026 action is an advance notice of proposed rulemaking, not a final rule, so it does not create new requirements by itself. But it shows that the FTC has not stepped away from recurring-payment and cancellation issues. FTC Negative Option ANPRM
• New York City has proposed subscription-cancellation rules. The city’s rules page continues to identify the matter as proposed, with the public hearing and comment period tied to May 8, 2026. NYC Proposed Subscription-Cancellation Rule
• North Carolina House Bill 188 also remains worth watching. The official bill page shows the House passed the bill in May 2025 and that it was referred to the Senate Rules and Operations Committee. North Carolina HB 188
• Messaging rules are another pressure point. The FCC has delayed one limited cross-category consent-revocation requirement until January 31, 2027, while other consent-revocation rules remain active. FCC DA 26-12

Insider Take

The volume of change is the story.

Subscription operators are not dealing with one federal rule or one state renewal-notice requirement. The work now cuts across enrollment, consent, billing, cancellation, messaging, privacy, vendor coordination, and customer service.

That makes compliance harder to manage from legal alone. The companies that handle this best will know which rules are live, which proposals are still pending, and which teams own each customer touchpoint.

This is where subscription compliance is heading: less one-time review, more operating discipline.

For members: Go deeper

Subscription Insider’s Regulatory Monitor organizes these developments in one place, including current priorities, upcoming dates, watchlist items, and links to dedicated Regulatory Briefs for deeper learning and issue-by-issue review.

The briefs go deeper on the specific federal, state, and local requirements, including current status, key dates, operating implications, primary sources, and questions to bring to legal counsel.

This article is news analysis and business-planning information, not legal advice. Businesses should work with qualified legal counsel to determine how any law, rule, proposal, order, guidance, or enforcement development applies to their specific operations.