# Free trials, freemium and cancellation rules under consumer-protection law
In 2023, the US Federal Trade Commission (FTC) sued Amazon over Prime's sign-up and cancellation flow, alleging it took two clicks to subscribe and four pages, six clicks, to cancel. Amazon settled in 2025, agreeing to pay $2.5 billion, including refunds to consumers. That single case reframed how every SaaS company thinks about trial and billing UX: what used to be "growth hackinggrowth hackingAn experimental, data-driven approach to rapid growth by identifying and scaling the most efficient acquisition levers.View full definition →" is now, in many jurisdictions, a legal liability.
This lesson covers the rules shaping trial sign-ups, renewal disclosures and cancellation flows, and what marketing teams must check before launch.
SaaS growth playbooks rely on low-friction entry: free trials, freemium tiers, "$1 for 30 days" offers. The business logic is sound, get users into the product, monetize a fraction later. But regulators focus on the moments where friction is asymmetric: easy to start paying, hard to stop.
This asymmetry is the classic dark pattern: a UX design choice that manipulates users into decisions they wouldn't otherwise make (for example, hiding the cancel button, pre-checking upsells, or using confusing double negatives on consent boxes). Dark patterns are now an explicit enforcement priority in both the US and EU.
The Restore Online Shoppers' Confidence Act (ROSCA), enacted in 2010 and enforced by the FTC, governs negative option billing, meaning any offer that converts to a paid, recurring charge unless the customer acts to stop it (trial-to-paid conversions, auto-renewing annual plans).
ROSCA requires three things before charging a customer:
1. Clear disclosure of the terms before billing information is collected (price, that it will recur, how to cancel).
2. Express informed consent, not a pre-checked box.
3. A simple cancellation mechanism, at least as easy as the sign-up mechanism.
That third point is what the FTC's 2024 "click-to-cancel" rule (part of its broader negative option rulemaking) tried to codify: if you can subscribe online in two clicks, you must be able to cancel online in a comparable number of clicks, no forced phone calls, no "chat with retention agent" mazes. The rule was finalized in 2024 but faced legal challenges in 2025 over FTC procedure; SaaS companies should treat "cancel as easy as sign-up" as the direction of travel regardless of the rule's exact litigation status, because state laws and FTC case-by-case enforcement under existing ROSCA authority already push the same way.
Practical SaaS example: a project-management tool offering "14 days free, then $29/month" must show that price and renewal term on the same screen where the user enters card details, not buried in a linked terms page.
California's Automatic Renewal Law (ARL), amended in 2018 and again with stronger rules effective in 2025, adds requirements on top of ROSCA:
Other states (New York, Illinois, Vermont) have similar automatic-renewal statutes. For a SaaS company selling nationally, the practical approach is to build to the strictest applicable state standard rather than maintain 50 different flows.
In the EU, the Consumer Rights Directive (CRD, 2011/83/EU) requires traders to give consumers clear pre-contractual information, including total price, contract duration and renewal terms, before the consumer is bound. Article 8(2) specifically requires an explicit acknowledgment that the order implies an obligation to pay, commonly implemented as a labeled "Order with obligation to pay" button.
Layered on top:
The EU's default consumer right to a 14-day withdrawal period on digital contracts also matters for SaaS: if you let a consumer start using the paid service immediately, you generally need their explicit consent to waive the withdrawal right, and to acknowledge they'll lose it once the service begins. Skip that consent screen and the customer may be entitled to a full refund even after using the product.
A defensible flow, US and EU combined, typically includes:
1. Price and billing frequency shown on the same page where payment info is collected.
2. No pre-ticked add-ons, seats, or upsells.
3. A confirmation email at trial start, plus a reminder before conversion (especially required in California and increasingly expected as best practice everywhere).
4. A cancel button reachable from account settings, not routed exclusively through a retention chat, phone line, or "email support" step.
5. Cancellation taking effect without requiring a reason or a completed exit survey as a blocking step.
For a useful practitioner reference, the FTC's own guidance is a good primary source: FTC Negative Option Rule materials.
Before any new trial or freemium campaign ships, marketing and legal should jointly verify:
Knowledge check
1. Under ROSCA, what specifically made Amazon's Prime cancellation flow legally problematic, regardless of the exact number of clicks involved?
2. A SaaS company's free trial sign-up page has a checkbox pre-checked that reads 'I do not wish to opt out of the paid renewal.' Why would this likely violate ROSCA's consent requirement?
3. A company wants to launch a '$1 for 30 days' trial that auto-renews into a $50/month subscription. Which design choice would best align with ROSCA's disclosure requirement?
4. Select ALL correct answers describing what qualifies as a 'dark pattern' in the context of subscription UX.
Select all the correct answers.
5. Select ALL correct answers about what ROSCA requires before a company charges a customer under a negative-option billing model.
Select all the correct answers.
Expect continued FTC activity even amid legal wrangling over the click-to-cancel rule's exact text, because ROSCA itself (not just the 2024 rule) already gives the FTC authority to act against deceptive negative-option practices. Adobe faced FTC litigation in 2024 over alleged hidden early-termination fees on annual subscriptions marketed as monthly, a useful cautionary example for any SaaS company with multi-month commitment plans disguised as short-term pricing.
In the EU, the European Commission's ongoing sweeps of subscription-based websites (coordinated through the Consumer Protection Cooperation network) periodically target streaming, software and app subscriptions specifically for cancellation friction. SaaS marketers selling into Europe should assume their checkout flow could be sampled.
🎬 [VIDEO: "How the FTC's Click-to-Cancel Rule Could Change Subscriptions" - youtube.com - search for coverage from a reputable business or legal news channel explaining the rule's requirements and current legal status]