New York City's Click-to-Cancel Rule: What Subscription Businesses Need to Know

New York City will require subscription businesses to make cancellation as straightforward as signup under a Click-to-Cancel rule announced by Mayor Zohran Mamdani on Friday. The rule takes effect October 1, 2026, and will be enforced by the city's Department of Consumer and Worker Protection.
The regulation applies to automatic renewal and continuous service subscriptions—the mechanics that have become central to how streaming services, SaaS platforms, meal kits, gyms, and media bundles operate. It mandates clear, upfront disclosure of subscription terms and prohibits companies from charging customers to return merchandise provided free as part of a subscription package NYC Mayor's Office. Violations trigger restitution plus penalties starting at $525 per instance—a per-violation structure that compounds quickly for operators with substantial New York City subscriber bases.
The Department of Consumer and Worker Protection first proposed the rule on April 9, 2026, with Commissioner Levine standing alongside Mamdani at the initial announcement NYC Mayor's Office. The proposal originates from Mamdani's Executive Order 10 and was formally published on the city's rulemaking portal ahead of finalization Lowenstein Sandler. Legal observers have called it the first municipal click-to-cancel rule in the country Kilpatrick Townsend.
A companion rule targeting junk fees is advancing on a parallel track and opens for public comment on August 7 Engadget. Together, the two rules suggest the Department intends to treat disclosure practices and cancellation friction as a single enforcement priority.
The New York City action addresses a gap left by failed federal efforts. The FTC's national click-to-cancel rule, initiated during the Biden administration, was struck down by a federal judge days before its 2025 effective date, and a subsequent version was vacated in July 2025 after the Eighth Circuit Court of Appeals ruled against it The Guardian. New York City's rule now stands as the most concrete cancellation-friction regulation currently in force anywhere in the United States, though it applies only within city limits.
The connection to that federal effort is direct. Lina Khan, who chaired the FTC when it drafted the original national rule, served as a transition co-chair for Mamdani Engadget. For engineering and legal teams at subscription businesses, that lineage matters: the substantive requirements in the NYC rule—symmetry between signup and cancellation flows, disclosure of renewal terms, prohibition on unearned return fees—closely mirror provisions the FTC attempted to impose nationally.
Compliance will be determined by jurisdiction and residency rather than corporate headquarters. The rule applies to New York City residents specifically, meaning any subscription business with customers in the five boroughs falls under it regardless of incorporation or billing infrastructure location NYC Mayor's Office. That geographic trigger creates familiar technical complexity: subscription and billing platforms will need residency-aware logic to surface a compliant cancellation path for NYC-resident accounts, separate from flows elsewhere, unless companies choose to apply the NYC standard universally to avoid maintaining parallel systems—the approach many took after GDPR and CCPA took effect.
The rule does not operate in isolation from existing state law. New York State already regulates how businesses must accept cancellation notices and what terms they must disclose for auto-renewing subscriptions. The Department acknowledges overlap between the city rule and state statute Engadget. Subscription businesses operating in New York will need to satisfy both city and state obligations, a task legal advisories are already flagging as a compliance priority for consumer-facing platforms Consumer Finance Monitor.
A familiar pattern has emerged across privacy and platform regulation over the past decade: when federal rulemaking stalls in courts, state and municipal governments fill the gap, and companies tend to build compliance infrastructure to the strictest applicable jurisdiction rather than maintain different versions for different regions. New York City is a large market and symbolically significant one, so its cancellation-flow requirements may end up functioning as a de facto national standard for subscription products that want to avoid maintaining separate flows across multiple jurisdictions.


