Subscription law dataset (JSON and CSV)
Every US subscription auto-renewal requirement in Checkbox's catalog as open data: 204 current requirements with citations, effective dates, notice windows and enforcement, as JSON and CSV under CC BY 4.0. Versioned; pending attorney review.
An open, machine-readable dataset of US subscription and automatic-renewal requirements: 215 requirement records (204 current, 11 superseded versions kept for history) from 36 laws, covering 30 jurisdictions with cataloged requirements (federal, states, DC and New York City). It is the same catalog Checkbox's rules engine evaluates, published so that anyone can build on it.
| Version | 2026.11.01.1 (catalog), schema 1.0, rules 1.4.0 |
| Last reviewed against primary sources | 2026-10-29 |
| License | CC BY 4.0 — use, share and adapt, with attribution |
| Review status | Draft: pending attorney review (every record carries legal_review_status) |
| Formats | JSON (laws + requirements), CSV (one row per requirement) |
| Changes | Changelog |
Download
- JSON:
https://checkbox.site/laws/data.json - CSV:
https://checkbox.site/laws/data.csv
Both are served with Access-Control-Allow-Origin: *, so a browser app can read them directly. They are regenerated from the catalog on every release; the version field changes whenever any legal content changes.
How to cite
Checkbox. US Subscription Auto-Renewal Requirements Dataset, version 2026.11.01.1 (last reviewed 2026-10-29).
https://checkbox.site/laws/data. Licensed under CC BY 4.0.Attribution under CC BY 4.0: name Checkbox, link to this page, give the version, and say whether you changed the data.
JSON structure
The JSON file has dataset metadata, then jurisdictions[] (each with its laws[] and enforcement summary) and requirements[]:
| Field | Meaning |
|---|---|
version, schema_version, last_reviewed, license, legal_review_status | Dataset metadata |
jurisdictions[].key | US-FED, US-CA, …, US-NY-NYC (New York City) |
jurisdictions[].url | The law page on checkbox.site |
jurisdictions[].laws[] | statute, citation, source_url, effective_date, status (in_force, enacted_not_yet_effective, not_cataloged), confidence, verification, last_verified, summary, scope, amendments[] |
jurisdictions[].enforcement | private_right_of_action (yes, via_general_consumer_law, ag_only) and remedies |
jurisdictions[].research_note | For jurisdictions without a cataloged law: what the research found |
requirements[].id | Stable id, e.g. US-CA.17602.a.1 |
requirements[].stage | signup, confirmation, reminder, cancellation or config |
requirements[].title, summary | The obligation in plain English |
requirements[].citation, source_url | The provision it comes from |
requirements[].effective_date, sunset_date | When it applies (a sunset date marks a superseded version) |
requirements[].applies_when | Conditions (has_free_trial, min_trial_days, max_trial_days, min_term_months, online_signup, consumer_only, payment_methods); empty means always |
requirements[].notice_window | min_days_before, max_days_before, max_days_after, anchor (trial_end, renewal, price_change, charge, cancellation_deadline, signup) and a description |
requirements[].severity | How central the obligation is (critical, high, medium, low) |
requirements[].exposure | private_right_of_action, remedies, multiple_damages, statutory_damages, restitution, cure_period_days |
requirements[].check_ids | The Checkbox machine checks that test it (list) |
requirements[].legal_review_status | draft until an attorney signs off |
One record, as published:
{
"id": "US-CA.17602.b.1",
"jurisdiction": "US-CA",
"jurisdiction_name": "California",
"law": "California Automatic Renewal Law",
"stage": "reminder",
"title": "Notice before a free trial or promotional price longer than 31 days ends",
"summary": "If the consumer accepted a free gift or trial lasting more than 31 days (or a promotional price lasting more than 31 days), send a notice 3 to 21 days before the trial/promotional period expires stating: that the subscription will automatically renew unless cancelled; the length and other terms of the renewal period; the amount (or range) and frequency of the charges; one or more ways to cancel; a link (or other electronic method) to the cancellation process if sent electronically; and the business's contact information.",
"citation": "Cal. Bus. & Prof. Code § 17602(a)(8), (b)(1)",
"source_url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=BPC§ionNum=17602.",
"effective_date": "2022-07-01",
"sunset_date": null,
"applies_when": {
"has_free_trial": true,
"min_trial_days": 32
},
"notice_window": {
"min_days_before": 3,
"max_days_before": 21,
"max_days_after": null,
"anchor": "trial_end",
"description": "3-21 days before the trial ends"
},
"severity": "high",
"exposure": {
"private_right_of_action": "via_general_consumer_law",
"remedies": "No private right in the ARL itself (Mayron v. Google, 2020): plaintiffs sue under the UCL, FAL and CLRA and must show economic injury; CLRA requires a 30-day demand letter before damages. Goods or services provided without the required consent are an unconditional gift (§ 17603); all civil remedies are available (§ 17604, with a good-faith-compliance safe harbor). Public enforcement by the district attorneys' task force (CART): penalties plus restitution (HelloFresh $7.5M). Typical class settlements $0.6M-$7.5M.",
"multiple_damages": false,
"statutory_damages": false,
"restitution": true,
"cure_period_days": 30
},
"check_ids": [
"reminder.trial_ending",
"config.trial_reminder_enabled"
],
"legal_review_status": "draft",
"url": "https://checkbox.site/laws/california"
}CSV columns
id,jurisdiction,jurisdiction_name,law,stage,title,summary,citation,source_url,effective_date,sunset_date,has_free_trial,min_trial_days,max_trial_days,min_term_months,online_signup,consumer_only,payment_methods,notice_min_days_before,notice_max_days_before,notice_max_days_after,notice_anchor,notice_window,severity,private_right_of_action,remedies,cure_period_days,check_ids,legal_review_status,url,catalog_versionLists (check_ids, payment_methods) are separated by ;. Dates are ISO 8601 (YYYY-MM-DD).
Method
- Each requirement is drafted from the statute or regulation text linked in
source_urland verified against it (verificationon each law says how: official text, enacted session law, or secondary sources). - Each law records when it was last verified (
last_verified). Laws that were researched but deliberately not turned into requirements are included withstatus: "not_cataloged"and a summary saying why. - Enforcement and remedy summaries come from the cited statutes and from public enforcement records; figures that come from secondary sources say so.
- Nothing in the dataset has been reviewed by an attorney yet. It is research to build on and to take to counsel, not legal advice.
Found an error or a new law? Email support@checkbox.site with the source; corrections ship as a new version and appear in the changelog.
Browse by jurisdiction
Federal · Alabama · Alaska · Arizona · Arkansas · California · Colorado · Connecticut · Delaware · District of Columbia · Florida · Georgia · Hawaii · Idaho · Illinois · Indiana · Iowa · Kansas · Kentucky · Louisiana · Maine · Maryland · Massachusetts · Michigan · Minnesota · Mississippi · Missouri · Montana · Nebraska · Nevada · New Hampshire · New Jersey · New Mexico · New York · North Carolina · North Dakota · Ohio · Oklahoma · Oregon · Pennsylvania · Rhode Island · South Carolina · South Dakota · Tennessee · Texas · Utah · Vermont · Virginia · Washington · West Virginia · Wisconsin · Wyoming · New York City
Checkbox is compliance software, not a law firm; nothing in these docs is legal advice (details). You remain solely responsible for your subscription program, and Checkbox takes on no legal liability for it (Terms). Checkbox is a System1 company; Trust center · Status. For AI agents: every page is available as Markdown at the same URL plus .md; the index is /llms.txt.