Auto-Renewal Laws for Clinic Memberships: 2026 Guide
Starting October 1, 2026, New York City’s “click-to-cancel” rule requires a business selling memberships to offer an online cancellation path even when the member signed up in person, makes a violating seller liable for restitution of every charge taken after a member’s first attempt to cancel, and backs it with an escalating penalty schedule: $525 for a first violation, $1,050 for a second, $3,500 for a third and any after (6 RCNY 5-110.1 and 6-47).
Federally, the trend runs the other way. The FTC’s 2024 negative-option amendments were vacated in full by the Eighth Circuit on July 8, 2025, for a procedural defect in the agency’s rulemaking (Custom Communications, Inc. v. FTC). The Commission recodified the pre-2024 rule text, effective February 12, 2026 (91 FR 6507), then opened an ANPRM, comments closing April 13, 2026 (91 FR 12318). Nothing federal has followed; state law governs today.
Law-firm roundups list the statutes and stop there. This post adds the mechanics they skip: front-desk sign-ups, free-evaluation conversions, medical pauses, price changes, refunds, and how memberships sit next to PT board and DPC rules. Current as of September 2026.
Is the FTC click-to-cancel rule still in effect?
No. The rule the FTC finalized in October 2024 was vacated in full by the Eighth Circuit on procedural grounds: the Commission skipped the preliminary regulatory analysis Section 22 of the FTC Act requires once a rule is projected to carry over $100 million in annual impact (Custom Communications, Inc. v. FTC). The vacatur reinstated the 1973 rule, formalized by the FTC on February 12, 2026 (91 FR 6507), then followed by an ANPRM; comments closed April 13, 2026, with no proposed rule since (91 FR 12318).
What remains federally is narrow. 16 CFR Part 425 covers only “prenotification negative option plans,” the book-club model, not clinic memberships (16 CFR Part 425). ROSCA still applies, but only to a negative option “effected on the Internet”: disclosure before billing information is collected, express consent, and a simple cancellation mechanism (15 U.S.C. 8403). The FTC’s 2021 policy statement remains the clearest word on Section 5 generally: disclosures clear and conspicuous in “each medium … including all electronic devices and face-to-face communications,” cancellation “at least as easy” as sign-up and “through the same medium” (86 FR 60822), policy guidance rather than a rule with its own penalties. The state statutes below carry the actual deadlines and dollar figures.
Which state automatic renewal laws cover clinic memberships in 2026?
Ten jurisdictions now regulate automatic renewal and continuous-service offers broadly enough to reach a clinic membership.
| Jurisdiction and citation | Effective / applies from | Cancellation mechanism rule | Enforcement |
|---|---|---|---|
| California, Bus. & Prof. Code 17600 to 17606 | July 1, 2025 | Same medium as sign-up | Civil remedies, good-faith defense |
| Minnesota, Minn. Stat. 325G.56-325G.63 | January 1, 2025 | As easy/accessible as sign-up | Good-faith defense to civil penalties (325G.63) |
| Massachusetts, 940 CMR 38.00, § 38.05 | September 2, 2025 | Same medium as sign-up | AG, unfair/deceptive act |
| New York, GBL 527-a | November 5, 2025 (180 days after May 9, 2025 signing) | Same medium as consent | AG, $100-$500, $500-$1,000 if knowing |
| New York City, 6 RCNY 5-110 | October 1, 2026 | Same as NY, plus online required for in-person | Restitution; $525/$1,050/$3,500 |
| Maine, 10 M.R.S. 1210-C, 1210-D | January 1, 2026 | Same method and manner as enrollment | Unfair Trade Practices Act, treble refund |
| Maryland, Com. Law 14-1329 | June 1, 2026 | Same medium as consent | Unfair/deceptive practice, no private right |
| Connecticut, CGS 42-158ff | July 1, 2026 | Online agreements cancellable online; link, reply email, or phone option | Unfair trade practice, CGS 42-110b |
| Virginia, Va. Code 59.1-207.45 to 207.49 | July 1, 2026 | As easy as sign-up | VCPA, which carries a private right of action (59.1-204) |
| Louisiana, R.S. 51:3301-3305 | January 1, 2027 | Online, email, phone, or other common method | AG, to $500/violation, 30-day cure |
A few scope quirks matter. Nine of the ten have no healthcare-specific exclusion of any kind. Maine is the exception by way of its scope: its law reaches only enumerated categories, a clinic membership fits only as a “health club membership,” and the “health club” definition excludes “a health care facility” and businesses where such services are “incidental to the primary purpose” (1210-C(1)(B-1)). Virginia struck its health-club exemption and good-faith safe harbor in 2026; its amending acts carry no delayed-effective clause, so the July 1, 2026 date follows from the state constitution’s default for regular-session laws (Va. Const. art. IV, § 13). Louisiana carries two differently scoped small-business exemptions on the statute’s face, one for the whole chapter and a narrower one for just the notice subsection. Massachusetts’s rule is section 38.05 of the AG’s broader Unfair and Deceptive Fees regulation, 940 CMR 38.00; its 38.06(2) safe harbor cross-references a provider price-disclosure statute, not a membership exemption.
What does the New York City click-to-cancel rule require on October 1, 2026?
New York City’s rule is a DCWP regulation under Administrative Code 20-702, effective October 1, 2026, “to give all stakeholders sufficient time to implement and comply” (Notice of Adoption).
Disclosure must happen “before consent to the offer or billing information has been requested and in visual proximity” to the request (5-110.1(b)); cancellation must be “as easy to use as the mechanism that the consumer used to provide consent” and “through the same medium” (5-110.1(c)). One point goes further than state law: in-person consent must also get an online mechanism (5-110.1(d)), where state law allows online or telephone (GBL 527-a(1)(d-1)).
Notices: 15 to 45 days before the deadline for year-plus terms renewing six months or more; 5 business days to 30 days for a material change including a price increase; 3 to 21 days for a free trial over a month (5-110.1(g)-(i)). A seller found in violation of any part of the rule is liable for everything charged after the consumer’s first cancellation attempt (5-110.2); penalties run $525, $1,050, and $3,500 for a first, second, and later violation (6 RCNY 6-47).
Health and fitness groups were among the industry commenters who argued state law already covered the ground; DCWP answered that the city rule differs from the GBL mainly in penalties, restitution, and cancellation mediums, and its exemption list (5-110.3) contains no health or fitness entry. The rule’s text does not address its geographic reach, so this piece doesn’t assert anything beyond what it states.
Do automatic renewal laws apply to front-desk sign-ups?
Yes, unlike ROSCA, which reaches only internet sign-ups:
| Jurisdiction | In-person consent, cancellation option required |
|---|---|
| California | Same medium as the transaction; reminder by phone, mail, or internet (17602(f), (h)(1)) |
| Minnesota | As easy and accessible as sign-up (325G.57 subd. 2(3)(ii)) |
| Massachusetts | Internet or phone required, plus an in-person method “where practical” (38.05(3)(b)3) |
| New York State | Online or phone, at minimum (527-a(1)(d-1)) |
| New York City | Online specifically (5-110.1(d)) |
| Maryland | Electronic and phone, plus in person (14-1329(b)(3)(iii)) |
| Connecticut | Cancel by link, reply email, or (from July 1, 2026) phone; annual reminder by email, mail, or phone for in-person activation (42-158ff(d)(1), (e)) |
| Virginia | Electronic medium or free telephone call (59.1-207.46(B)) |
| Maine | Same method and manner as enrollment (1210-C) |
| Louisiana | Online, email, phone, or another common method (3303(A)(7)) |
None of this exempts the paper agreement signed at a desk: it needs clear-and-conspicuous terms near the signature line, a consent step separate from the intake paperwork and retainable by the patient, and a cancellation path that doesn’t require a return visit. California requires the business to keep verification of consent for three years, or one year past termination if longer (17602(a)(6)); Louisiana, one year (3303(A)(5)), echoing the FTC’s principle that consent be obtained “separately” and verifiable (86 FR 60822).
Free evaluation to paid membership: what notice does a trial conversion need?
| Jurisdiction | Trial length triggering a notice | Notice window |
|---|---|---|
| California | Over 31 days | 3 to 21 days before expiration (17602(b)(1)) |
| Minnesota | Over 30 days | 5 to 30 days before trial ends (325G.57 subd. 4) |
| Massachusetts | Any feature over 31 days | Written notice 5 to 30 days before cancel-by date; conversion date disclosed up front (38.05(1), (4)) |
| New York and New York City | Over a month | 3 to 21 days before the first chargeable period (527-a(1)(h); 5-110.1(i)) |
| Maryland | Over 14 days | 3 to 21 days before renewal (14-1329(c)) |
| Connecticut | At least 32 days (electronic or telephonic offers) | Between 21 days after trial start and 3 days before it ends (42-158ff(b)(1)(F)) |
| Virginia | Over 30 days | Within 30 days of trial’s end (59.1-207.46(D)) |
| Louisiana | Any conversion to paid | At least 3 days before, unless small-business exempt (3303(C)(c), (E)(5)) |
A free evaluation that never converts isn’t a negative option, and none of these windows apply. The moment the offer becomes a free first visit that converts into a recurring charge unless the patient cancels, it’s a negative option under every statute above, and the notice window is measured back from the date the first charge would post.
Can a patient pause or freeze a membership for a medical reason?
No auto-renewal statute requires a medical pause. Minnesota comes closest: a seller may describe options for “downgrading, pausing, or suspending” during a cancellation attempt, but may not push new offers or contract modifications until the consumer gives permission, and may ask for that permission only once per attempt (325G.58 subd. 4 and 5).
The actual right to a pause, where one exists, comes from an older, separate layer: state health club statutes, whose definitions don’t match the statutes above. New York’s covers any fitness business, no exclusion for licensed professionals (GBL 621); a member “significantly physically disabled for a period in excess of three months” can cancel, refunded within 10 business days minus services consumed (GBL 624). California’s health studio law excludes “professional services rendered or furnished by a person licensed under” Division 2 of the Business and Professions Code (the healing-arts licensing division; confirm with counsel which of your licenses fall under it), but otherwise grants disabled members a proportionate refund (Civ. Code 1812.81; 1812.89): a licensed-clinical membership may sit outside it, an unlicensed wellness membership may not. Maine excludes health care facilities and “incidental” fitness services from its health club definition (1210-C(1)(B-1)); Virginia removed its exemption in 2026, so a Virginia health club is now covered directly.
No uniform rule emerges. The workable answer: a written pause policy, applied consistently and never substituted for a requested cancellation, borrowing Minnesota’s offer-after-acknowledgment sequencing.
How much notice does a membership price increase need?
| Jurisdiction | Notice window | Other requirement |
|---|---|---|
| California | 7 to 30 days before (17602(g)(2)) | Clear and conspicuous notice plus cancellation instructions (17602(g)(1)) |
| New York | 5 business days to 30 days before (527-a(1)(g)) | Alternative: 14-day cancel window with pro rata refund (527-a(1)(b-1)) |
| New York City | 5 business days to 30 days before (5-110.1(h)) | Same restitution exposure as any post-cancellation charge |
| Minnesota | Prior notice required | Without notice, the change is void and unenforceable (325G.57 subd. 3) |
| Maryland | No fixed window | Mechanism must let the consumer avoid the increased amount (14-1329(b)(3)) |
| Virginia | Prior notice, no fixed window | Clear and conspicuous notice of the material change (59.1-207.46(C)) |
| Connecticut | No separate price-change window in the act | Recurring charges must be disclosed at the original offer (42-158ff(b)(1)(B)) |
| Louisiana | At least 3 days before | Treated as a material change (3303(C)(b)) |
| Massachusetts | No separate clause | Runs through the recurring-charge notice windows (38.05(4), (6)) |
Refunds, restitution, and what happens when cancellation fails
“Unconditional gift” remedies, letting a consumer keep unordered merchandise free, are written for goods, not services (California’s 17603 and the parallel language in Minnesota, New York, and Virginia all speak of goods sent or shipped without consent). For services, exposure runs through:
| Jurisdiction | Remedy or exposure |
|---|---|
| New York City | Restitution of every charge after the first cancellation attempt (5-110.2) |
| Maine | UTPA violation; refund or credit for 3x the unauthorized amount (1210-D) |
| Minnesota | Unnoticed change void; continuous-service termination within 31 days of notice (325G.57 subd. 3; 325G.59 subd. 2(a)) |
| Maryland, Connecticut, Virginia | Unfair/deceptive trade practice; Virginia routes violations to the VCPA (59.1-207.49), which carries a private right of action (59.1-204) |
| New York State | AG penalty $100/$500, rising to $500/$1,000 if knowing (527-a(3)) |
| Louisiana | Up to $500/violation, after notice and a 30-day cure (3303(D); 3304) |
| New York health club statute | Disability cancellation refunded within 10 business days (GBL 624) |
The pattern holds everywhere: continuing to charge after a cancellation request creates the liability, not the contract. A spoken cancellation at the front desk that never reaches billing is the scenario every one of these remedies is written for.
Memberships, prepaid packages, and DPC agreements are three different contracts
A recurring membership, a prepaid package, and a DPC agreement look alike on an intake form but sit under three different bodies of law. State PT boards, including North Carolina and Texas, have taken positions on prepaid packages, a structure that sits outside these statutes unless the package itself renews or converts automatically; see cash-pay PT packages and state board rules rather than duplicating it here.
DPC agreements are their own category. Florida’s direct health care agreement statute requires termination on “at least 30 days’ advance written notice,” a description of covered services and the monthly fee, a refund of prepaid fees if the provider stops offering services, and a signature-page statement that the agreement “is not health insurance” (Fla. Stat. 624.27). None of the ten auto-renewal statutes exempts a DPC arrangement, so a primary care membership meeting a state’s DPC definition may need to satisfy both. For Medicare beneficiaries, the cash-pay boundary is separate; see Medicare and cash-pay physical therapy.
Membership agreement checklist
- Price, term, and cancellation method near the signature line, with a consent step separate from the intake paperwork and retainable by the patient.
- A cancellation path that works without a return visit: email or phone at minimum, plus online for New York City.
- No retention conversation before processing a requested cancellation; at most one offer, after acknowledging the cancellation right.
- A calendar of renewal, trial-conversion, and price-change windows by jurisdiction; the windows above run from 3 days (Louisiana) to 60 days (Virginia’s long-term renewals).
- Consent records kept three years (California) or one year (Louisiana); annual reminders sent where required (California, Minnesota, Connecticut).
- A written pause or freeze policy, even where no statute requires one, applied consistently.
- A check for overlap with a state health club statute’s refund and disability provisions.
- Clarity on whether an offering is a membership, a prepaid package, or a DPC agreement, and which rules apply.
This is general compliance information, not legal advice. Confirm any new or changed membership agreement with counsel licensed in your state before launching or changing it.
A membership fee and an insurance claim for the same patient often run through the same visit, and billing software has to keep the two straight without asking a clinician to remember which rule applies. PrismEHR supports membership billing and hybrid membership-plus-insurance billing across a multidisciplinary practice, so a primary care location running a membership alongside traditional claims isn’t forcing one revenue model through a system built for the other. Weighing a membership against a prepaid package instead? The state board landscape for packages is the other half of this picture: cash-pay PT packages and state board rules.