Regulation and Compliance
From subscription offers, free trials, special promotions, marketing copy, auto-renewal notification, consumer privacy, financial reporting, payment processes, and more – there are a lot of laws that subscription, membership, and recurring-revenue companies need to understand and comply with.
Start Here
Indiana, Kentucky, and Rhode Island privacy laws are now live, raising the bar for customer data requests, opt-outs, and data-sharing controls across the subscription stack.
The FTC is soliciting comments through Jan. 2, 2026—while enforcement pressure under existing authorities remains active.
State enforcement is accelerating. Here’s how to prepare your flows before involving legal counsel and avoid costly rework.
Law going live this week requires clear disclosures, easy cancellation, and express consent. Businesses may owe three times the unauthorized amounts as a refund or
Why Scaling Success Requires More Than Growth Alone. Learn proven frameworks and playbooks to scale profitably.
Effective September 2, 2025, Massachusetts’ “Unfair and Deceptive Fees” regulation (940 CMR 38.00) bans hidden charges and sets strict standards for subscription trials, auto-renewals, and
This $3.4 million settlement offers four key warnings for subscription businesses, especially those in media and streaming.
Marc Roth unpacks the implications of the 8th Circuit decision, ongoing ROSCA risks, and why compliance prep still matters.
Businesses must now offer cancellation methods matching sign-up flows and provide annual renewal reminders for subscriptions started or extended on or after July 1, 2025.
Compliance legal expert Marc Roth breaks down the FTC’s surprise 60-day delay of the Negative Option Rule—and the confusion it leaves behind.
Paavana Kumar breaks down the new disclosure, consent, and cancellation rules subscription businesses must follow under the FTC’s Click-to-Cancel Rule and stricter state laws.
Marc Roth Unpacks a Flurry of State Legislation—and Why the FTC’s Negative Option Rule May Not Be Dead Yet
Learn from Mark Roth of Cobalt Law about the FTC’s negative option rule, new state laws, and what subscription businesses must do.
Amid legal challenges and Congressional review, the FTC’s long-anticipated rule on negative option marketing is set to take effect in January.
Expert Analysis from Cobalt Law’s Marc Roth on the FTC’s Final Negative Option Rule—What’s Changed, What’s Next, and How It Impacts Your Business
Mark Roth of Cobalt Law provides the latest updates on the FTC’s stalled Negative Option Rulemaking and California’s evolving AB 2863 legislation.
Marc Roth, Subscription Legal Expert, Analyzes Recent Changes in Auto-Renewal Legislation Across the FTC and Five States
Coverage of the FTC’s latest hearing on proposed amendments to negative option billing rules, featuring industry pushback and debates over consumer protection and business impacts.
Master Negative Option billing with our expert guide. Discover the history, regulations, and FTC updates critical for subscription businesses to ensure compliance.
The US and EU agreed to a new Data Privacy Framework to safely and securely share data across the Atlantic.
Latest
Agency alleges subscription terms were not clear and conspicuous and consumers did not provide valid affirmative consent for recurring billing.
The bill’s requirements mirror many click-to-cancel concepts, but would set them in statute rather than FTC rule.
New York AG Letitia James is demanding Instacart’s pricing-test records and disclosure screen flows by Jan. 29, citing the state’s algorithmic pricing disclosure law.
Complaint states pay-TV ESPN subscribers were led to believe WWE Premium Live Events were included, then faced a separate $29.99/month plan—spotlighting bundle/entitlement risk.
We reviewed all 32 FTC filings on reviving click-to-cancel rulemaking, revealing fault lines over scope, save offers, consent mechanics, and exemptions.
The settlement administrator says eligible consumers should receive notice by Jan. 23 and have 180 days to submit a claim.
Executive Orders create a citywide task force and directs the Department of Consumer and Worker Protection (DCWP) to investigate, enforce, and pursue potential rulemaking.
Indiana, Kentucky, and Rhode Island privacy laws are now live, raising the bar for customer data requests, opt-outs, and data-sharing controls across the subscription stack.
The blocked law would have required age verification and parental consent at the app store level—an acquisition and in-app monetization chokepoint for subscription apps.
LB504’s operative date (Jan. 1) has arrived, with requirements spanning defaults, targeted ads, notifications, and certain engagement features for users the service knows are minors.
