What the Click-to-Cancel Rule Vacatur Actually Changed (and What It Did Not)

What the Eighth Circuit actually vacated, and on what ground

The decision is Custom Communications, Inc. v. Federal Trade Commission, No. 24-3137, decided by the United States Court of Appeals for the Eighth Circuit on July 8, 2025. The panel vacated the FTC revised Negative Option Rule, codified at 16 CFR Part 425 and known popularly as the "click to cancel" rule, in its entirety, days before the agency was set to begin full enforcement on July 14, 2025.

The ground was procedural, not substantive. Section 18 of the FTC Act requires the Commission to prepare a preliminary regulatory analysis of a proposed rule's costs and benefits when its estimated annual economic impact reaches at least $100 million. The FTC had initially estimated the rule fell below that threshold, an estimate an administrative law judge later found unrealistically low, and it issued the final rule without producing the analysis the statute then required. The court held that omission was a prejudicial error going to the fairness of the rulemaking, and that the remedy was to set the rule aside.

A rule vacated on procedure is not a ruling that the conduct is lawful

This is the distinction the popular coverage collapses. Vacatur on procedural grounds voids a rule because of how it was made, not because a court has examined the practice it targeted and found that practice permissible. The Eighth Circuit did not rule that a subscription may be made harder to leave than to join. It did not question the FTC's authority over deceptive subscription practices. It faulted a missing analytical step and left the substantive question where it had always sat, under the statutes that predate the rule.

The consequence is narrow. What disappeared was a single, uniform, nationally binding text that would have translated general legal duties into a prescriptive federal standard. What remained was the general legal duty itself, enforced as it was before the rule was written. A business that reads the vacatur as a repeal of subscription-cancellation law has confused the instrument with the obligation.

The negative option rule fell; ROSCA did not

The load-bearing federal statute in this area is the Restore Online Shoppers Confidence Act, ROSCA, enacted in 2010 and codified at 15 U.S.C. sections 8401 to 8405. ROSCA governs any negative option sale, meaning any arrangement in which a customer's silence or inaction is treated as consent to a recurring charge. It was not before the Eighth Circuit and it did not move on July 8.

ROSCA imposes three durable obligations on a business selling through a negative option, none of which the vacatur disturbed.

• Disclose all material terms clearly and conspicuously before obtaining the customer's billing information, including that charges will recur, at what amount and frequency, and how to stop them.
• Obtain the customer's express informed consent to the negative-option feature before charging, distinct from consent bundled into unrelated terms.
• Provide a simple mechanism to stop recurring charges, so a customer who wants to cancel can do so without being routed through obstruction.

Section 5 and the dark-pattern doctrine remain the live floor

Beneath ROSCA sits the Commission's standing authority under Section 5 of the FTC Act, 15 U.S.C. section 45, to act against unfair or deceptive acts and practices. This is the power the FTC used against obstructed cancellation long before any dedicated rule existed, and the vacatur left it fully available.

That authority is not theoretical in this domain. In its September 2022 staff report, "Bringing Dark Patterns to Light," the FTC named obstructed cancellation, alongside disguised advertising, buried fees, and forced data sharing, as a recurring interface tactic it treats as actionable under Section 5. The report was approved before the click to cancel rule was drafted and stands independent of it. It drew on the empirical record documenting how common these designs are: a large automated and manual crawl of shopping websites by researchers at Princeton catalogued more than eighteen hundred dark-pattern instances across fifteen distinct categories, including obstructed cancellation, and found third-party vendors selling the design as a turnkey service. The doctrine that a hard-to-exit subscription can be a deceptive practice did not depend on the rule, and it did not fall with it.

State automatic-renewal statutes were never at issue

A federal court vacating a federal rule has no effect on state law. The automatic-renewal statutes enacted by individual states, of which California's is the most cited, continue to impose their own disclosure, consent, and cancellation duties on any business serving residents of those states. They were not part of the case and were not touched by the ruling.

For an operator this is the most easily overlooked layer. Even in the interval where no dedicated federal rule is in effect, a subscription business with customers across several states faces a live and growing patchwork of state auto-renewal requirements. Compliance is not suspended by the vacatur; it is simply governed by the state statutes that were always there. Standardizing a cancellation flow to the strictest applicable state standard is generally the posture that carries the least exposure as the federal picture resettles.

The misconception, stated plainly, and why it spread

The circulating error is compact: "the FTC click to cancel rule was struck down, so cancellation rules no longer apply." Both halves mislead. The rule was vacated, not upheld on the merits and then repealed, and the vacatur reached one federal rule, not the statutory and state-law body around it.

The error spread for understandable reasons. Headlines compressed a procedural vacatur into "rule struck down," which reads to a non-lawyer as a verdict on the merits. The rule and the underlying law share a name in common speech, so removing the rule sounds like removing the duty. And the timing, a vacatur landing days before a well-publicized enforcement date, invited the story that an obligation had been lifted. The accurate reading is less dramatic and more consequential for planning: the enforcement surface did not collapse to zero, it reverted to a pre-rule baseline that was already substantial.

A replacement rulemaking is already moving

The vacatur reset the process rather than ending it. The FTC has moved to replace the vacated text, submitting a draft advance notice of proposed rulemaking on negative option plans to the Office of Management and Budget on January 30, 2026. That step signals the agency intends to rebuild a negative-option rule through the analytical procedure the Eighth Circuit found missing the first time.

What that future rule will require, how prescriptive it will be, and when it will take effect are genuinely unsettled, and confident predictions about regulatory timing have a poor track record. This is the one part of the picture that is a forecast rather than a settled fact, and it is tiered as such below. The stable planning posture treats a procedurally sound successor rule as a realistic future state and designs cancellation flows that already satisfy the surviving ROSCA and state-law standards, so that a new rule asks for refinement rather than a scramble.

How to read this if you run a subscription or membership

The operational translation is short. The vacatur removed a rule, not a duty. If a business bills on a recurring basis, its cancellation flow is governed today by ROSCA, by the auto-renewal statutes of every state its customers live in, and by Section 5, all of which survived intact. A flow that discloses recurring terms before taking payment, captures genuine consent, and lets a customer leave through a mechanism at least as simple as the one they joined through is aligned with the law as it actually stands in 2026.

There is a credibility dimension here beyond avoiding enforcement. In a period when the headline law appears to have loosened, a visibly honest cancellation flow is a trust signal a competitor relying on the misconception will not have. The durable position, legally and reputationally, is to hold the cancellation-parity standard whether or not a specific federal rule is in force, and to be able to show that you did.

The status, dated and caveated

Regulatory content ages. The facts here are current as of July 20, 2026: the click to cancel rule stands vacated by the Eighth Circuit as of July 8, 2025; ROSCA, state auto-renewal statutes, and FTC Act Section 5 remain in force; and a replacement FTC rulemaking is in motion. Any of these can change, the rulemaking most of all.

This article is a plain-language explanation of a legal status, not legal advice, and it creates no advisory relationship. Before relying on it for a specific cancellation flow, contract, or disclosure, have the details reviewed against your jurisdictions and your facts by qualified counsel. Compliance-sensitive content on this site is routed through internal legal review before publication for exactly that reason.