As of October 1, 2026, New York City has the country's first municipal click-to-cancel rule, and it applies based on where your customer lives, not where your company is registered. If any of your subscribers are in New York City, you are almost certainly covered, whether you are a five-person SaaS startup in Austin or a solo founder working from a laptop anywhere else.

This is worth ten minutes of your time this week, because the rule is narrower and stricter than most founders assume, and the penalties are real.

What does NYC's click-to-cancel rule actually require?

The core rule is simple: cancelling has to be at least as easy as signing up, and it has to go through the same channel you used to sign the customer up. If someone subscribed online, they must be able to cancel online, without being pushed to call a phone line or email support first (NYC DCWP; TechSpot).

That single requirement is where most SaaS cancel flows fall short today. A "cancel" button that routes to a support ticket queue, a retention specialist, or a "please call us" message is exactly the pattern the rule targets.

Who does the rule apply to?

Coverage is tied to the customer's location, not the business's. Multiple law firm summaries of the adopted rule describe it as applying to automatic-renewal and continuous-service subscriptions offered to New York City consumers, regardless of where the offering business is based (Skadden; Sheppard Mullin). If your product has any paying individual subscribers in New York City, the rule likely reaches you even if your company has no New York office or NYC address.

One open question worth flagging to a lawyer rather than guessing about yourself: whether the rule's definition of "consumer" reaches small businesses buying through a standard consumer-facing signup flow, not just individuals. Commenters raised this during the rulemaking process, and the public sources available don't settle it either way. If a meaningful share of your subscribers are sole proprietors or very small businesses rather than clear B2B accounts, it is worth a quick legal check rather than assuming you're exempt.

How is this different from existing state laws?

New York State and California already require some form of easy online cancellation, but NYC goes further. Loeb & Loeb's comparison notes that New York State's existing Automatic Renewal Law lets a business that signed someone up in person offer either an online cancellation option or a phone number. NYC's rule removes the phone-number option for online signups: if the customer signed up online, the rule calls for an online cancellation mechanism, full stop (Loeb & Loeb).

This also sits apart from federal law. The FTC's own click-to-cancel rule was vacated by the Eighth Circuit Court of Appeals in July 2025 on procedural grounds, before it ever took effect, and there is currently no federal rule in force. State and now city rules are filling that gap on their own timelines.

What happens if you don't comply?

NYC's Department of Consumer and Worker Protection (DCWP) enforces the rule directly. There is no private right of action, meaning individual customers can't sue you over it, but they can file a complaint with DCWP, which can pursue civil penalties and restitution (Sheppard Mullin).

Penalty figures reported by multiple outlets: $525 for a first violation, $1,050 for a second, and $3,500 for each violation after that (TechSpot; Music Business Worldwide). On top of that, businesses can owe restitution for charges taken after a customer's cancellation attempt. For an early-stage company, a handful of complaints could add up to a meaningful, avoidable cost.

A quick checklist for your cancel flow

Before your next release, walk your own signup-to-cancel path as a customer would and check each of these:

  • Can a customer who signed up online cancel entirely online, without being required to call or email first?
  • Is the cancel option visible and reachable from account settings, not buried behind a support form?
  • Does cancelling actually stop future billing immediately, rather than just opening a ticket?
  • Do you have any NYC-based subscribers today, even a handful? If yes, treat this as live compliance work, not a future project.
  • Have you asked a lawyer whether your subscriber base (individuals, freelancers, small businesses) falls under the rule's definition of "consumer"?
  • If you offer save offers or pause options at cancellation, do they appear only after the customer initiates cancellation, rather than blocking the cancel action itself?

Key takeaways

  • NYC's click-to-cancel rule took effect October 1, 2026, and applies based on where your customers are, not where your company is based.
  • The core requirement: cancellation must be as easy as signup and available through the same channel, with no forced phone call or email for online signups.
  • Violations carry civil penalties starting at $525 and scaling to $3,500, plus possible restitution.
  • It's stricter than New York State and California's existing laws, and there's currently no equivalent federal rule in force.

If your product serves individual subscribers anywhere in the US, this is a good week to open your own cancel flow in a new tab and make sure it would survive a New York City complaint, since the standard it's judged against keeps getting stricter.

Lokuna's hosted cancel page is built around this same principle: cancellation stays one click away, and any pause, discount, or call offer only appears after the customer has already started cancelling, never as a barrier in front of it.