Subscription agreements and what Australian businesses must comply with

Launching a subscription offering, whether a SaaS product, a curated product box or a professional membership, means running a business model built on repeat transactions. Every renewal is a fresh supply of goods or services, and the contract that governs it, usually your subscription terms and conditions, carries a set of legal obligations that apply whether you are a two-person startup or a business with thousands of subscribers.

The core obligations come from the Australian Consumer Law (the ACL, Schedule 2 to the Competition and Consumer Act 2010 (Cth)), which overlays your terms with rules on misleading conduct, unfair contract terms and consumer guarantees. Around that sit privacy law, payment rules, GST and marketing rules. This guide sets out who those obligations apply to, what each one requires, and what happens if you fall short.

Who the subscription rules apply to

Most of the obligations below apply to any business that supplies goods or services to Australian customers on a recurring basis, whether those customers are individuals or businesses. A few turn on size or activity thresholds, so it is worth checking where you sit:

Misleading conduct: the ACL's prohibition in s 18 applies to anyone acting in trade or commerce, with no turnover threshold. A two-person startup and a listed company face the same standard.
Consumer guarantees: apply whenever you supply goods or services to a consumer, broadly an individual acquiring them for personal, domestic or household use. A consumer does not need to sign anything for these rights to attach.
Unfair contract terms: the regime covers standard form contracts with consumers, and with small businesses where at least one party employs fewer than 100 people or has turnover under $10 million (s 23 of the ACL). That captures most B2B subscription customers.
Privacy: the Privacy Act 1988 (Cth) and the Australian Privacy Principles (the APPs) bind organisations with annual turnover above $3 million (s 6D), and some smaller businesses such as health service providers or those trading in personal information.
GST: you must register once your GST turnover reaches $75,000, and you must do so within 21 days of becoming required to register. Different thresholds apply to non-profits.
Marketing emails: the Spam Act 2003 (Cth) applies to commercial electronic messages sent to Australian subscribers, whatever your size.

Don't mislead subscribers

Section 18 of the Competition and Consumer Act 2010 (Cth) prohibits conduct in trade or commerce that is misleading or deceptive, or likely to mislead or deceive. For subscription businesses this reaches further than advertising. It covers the price you display, what your free trial promises, what you say about renewal, and how easy you make cancellation appear.

The ACCC treats subscription flows as a priority. In December 2025 it commenced Federal Court proceedings against HelloFresh and Youfoodz, alleging the meal-kit providers misled consumers about subscriptions, including difficulties cancelling and charges continuing after cancellation was requested. The case is ongoing, but it signals where the regulator is looking.

The unfair practices provisions in Part 3-1 of the ACL, which prohibit false or misleading representations, carry pecuniary penalties. For a body corporate the maximum is the greater of $100 million, three times the benefit gained, or 30% of adjusted turnover (s 224 of the ACL). A finding of misleading conduct under s 18 itself opens the door to court orders including injunctions, damages and compensation for affected consumers.

Practically, this means showing the total price up front, stating when and how much renewals will charge, and not burying cancellation in fine print.

Remove unfair contract terms

The unfair contract terms regime in Part 2-3 of the ACL is the one most likely to catch a subscription business out, because it operates on your standard form terms whether or not a customer has complained. Since November 2023, proposing an unfair term in a standard form consumer or small business contract is itself a contravention, and so is applying or relying on one (s 23(2A) and (2C) of the ACL). Before that change the worst outcome was that the term was void; now it attracts a penalty of up to $100 million for a body corporate, or $2.5 million for an individual (s 224).

A term is unfair if it would cause a significant imbalance in the parties' rights and obligations, is not reasonably necessary to protect the legitimate interests of the party advantaged by it, and would cause detriment if relied on (s 24). The term is presumed not to be reasonably necessary unless the business proves otherwise, and a court must consider how transparent the term is when deciding.

Terms that commonly fail in subscription contracts include automatic renewal with no notice, price increases without notice or consent, no-refund clauses that apply regardless of service failure, one-sided termination rights, and broad exclusions of liability for the very thing the customer paid for.

Honour the consumer guarantees

Consumer guarantees are non-excludable rights that attach to supplies to consumers. Goods must be of acceptable quality (s 54 of the ACL), meaning fit for purpose, free from defects, safe and durable as a reasonable consumer would expect. Services, which covers SaaS, memberships and professional subscriptions, must be rendered with due care and skill (s 60). The guarantees cannot be excluded, restricted or modified by your terms, and a clause that tries to do so is void.

For subscription goods such as product boxes, this means quality failures trigger remedies such as replacement or refund rather than a credit note if your terms say otherwise. For services, it means delivering what you contracted to deliver with reasonable care; an "as is" disclaimer will not displace the guarantee.

Make renewals and cancellation fair

Australia has no blanket ban on auto-renewing subscriptions. What the law requires is that renewal and cancellation are handled transparently, because a flow that traps customers into paying is a misleading-conduct problem even where no single term is unfair. The ACCC's HelloFresh and Youfoodz proceedings are squarely about this: allegations that cancellation was hard to find and charges continued regardless.

Cooling-off rights are the exception rather than the rule for online subscriptions. They apply in specific situations, most notably unsolicited consumer agreements, which are agreements negotiated off the supplier's premises or by phone, without the customer inviting the contact, where the price exceeds $100 (s 69 of the ACL). In those cases the customer has ten business days to terminate (s 82). An ordinary online sign-up generally carries no statutory cooling-off right, so if you offer one, make it real and easy to exercise.

Expect the transparency bar to rise. The Competition and Consumer Amendment (Unfair Trading Practices) Bill 2026, whose exposure draft was released in February 2026, would add a general prohibition on unfair trading practices and specific subscription obligations, including simpler cancellation processes and timely renewal notices. The government has said the changes target subscription traps, so businesses should plan for renewal reminders and easy cancellation to become mandatory if the bill passes.

Protect subscriber data

If you collect subscriber data, privacy law may bind you even if you are small. Organisations with annual turnover above $3 million must comply with the APPs in the Privacy Act 1988 (Cth) (s 6D). Smaller businesses are generally exempt but not always: the exemption does not apply to, for example, health service providers, businesses that trade in personal information, or reporting entities under the anti-money laundering regime.

Compliance is practical: publish a clear privacy policy, tell subscribers what you collect and why, secure the data, and delete it when they cancel or ask. Breaches of the APPs are investigated by the Office of the Australian Information Commissioner, and serious or repeated interferences with privacy attract civil penalties. An over-promising privacy policy creates its own consumer law exposure, so keep what you publish aligned with what you actually do.

Line up payments, GST and marketing

Recurring bank account debits run under the payments industry's direct debit scheme rules, which require clear authorisation from the customer and a straightforward way to cancel that authority. Your terms should record the authority, the amount and frequency, what happens on a failed payment, and how the customer revokes the arrangement, and your billing platform should be able to action a revocation promptly.

For GST, once your turnover reaches $75,000 you must register within 21 days of becoming required to do so, and prices displayed to consumers should be GST-inclusive. Subscriptions sold across borders raise additional questions about where GST applies, which is worth checking before you scale.

Marketing emails to subscribers must comply with the Spam Act 2003 (Cth): you need consent, accurate sender identification, and a working unsubscribe. If your renewal reminders carry marketing content, treat them as commercial messages under that Act.

Consequences of getting it wrong

Non-compliance is not a theoretical risk. The ACL's pecuniary penalties for a body corporate run to the greater of $100 million, three times the benefit, or 30% of adjusted turnover (s 224), and that applies to unfair terms and unfair practices as well as other contraventions. Individuals face up to $2.5 million. On top of penalties, courts can order injunctions, damages and compensation for affected subscribers. The ACCC's proceedings against HelloFresh and Youfoodz show that even well-funded, mainstream subscription businesses face Federal Court action, with the legal costs and reputational damage that come with it.

There are softer costs too. Chargeback and complaint patterns erode revenue, and a business that makes cancellation difficult will find its subscriber churn problems get worse before they get better.

A compliance checklist for your subscription model

Work through this checklist before you launch or change a subscription offering:

Map your flows: document sign-up, trial, renewal, price change, cancellation, refund and data deletion processes.
Review your terms against s 24: look for significant imbalance, one-sided discretion and clauses that are not transparent.
Check your disclosures: price, billing cycle, renewal timing and amount, and how to cancel.
Confirm guarantee compliance: do not exclude consumer guarantees, and honour them in practice.
Assess privacy scope: turnover above $3 million, or an exception that catches you.
Align payments: direct debit authority, failed payment handling and easy revocation.
Register for GST: once turnover reaches $75,000, and display inclusive pricing.
Keep records: versioned terms and timestamped acceptance records.
Watch the reform: plan for the unfair trading practices changes if the bill passes.

Where a lawyer helps

A commercial lawyer's role here is to review the terms and the flows, not just draft nicer wording. A practitioner will read your subscription terms against s 24 of the ACL, flag clauses that carry penalty risk now that unfair terms are prohibited, and redraft the ones that cannot be justified. They can also check your sign-up and cancellation flows for misleading-conduct exposure, review your privacy position, and put the payment authority wording in order. If you are responding to a complaint or an ACCC enquiry, that is the point to get advice, not after proceedings are filed.

The obligation that catches subscription businesses out

Of all the duties in this guide, the unfair contract terms regime is the one most often missed, because it applies to terms you have always used and nobody has ever complained about. Since November 2023 an unfair term in a standard form contract is not merely void, it is a contravention carrying penalties of up to $100 million for a company, and the ACCC is actively litigating subscription models. If you run a subscription business, the highest-value action this week is a clause-by-clause review of your terms against the test in s 24 of the ACL, and a test of your own cancellation flow, before a regulator or a reform does it for you.