Your Renewal Emails Are About to Become Legal Notices

On 9 August, the government moved the UK's subscription trap deadline forward by three months. It's no longer Spring 2027. It's January 2027, the government's announced commencement date, with the secondary legislation that locks in the fine detail still to land. If you run a subscription brand on Klaviyo, that's not a legal update. It's a deadline for your renewal and win-back flows.

Here's the part that got missed: the trade press covered this as a compliance story. Nobody's covered it as a CRM story yet. That's the gap this edition is about.

It's an easy gap to fall into. Subscription compliance sounds like a legal team problem, so it lands on legal's desk, gets read as a policy question, and gets answered with a memo. Nobody walks it over to whoever owns the Klaviyo account and asks whether the actual automations meet the actual rule. By the time that conversation happens, there's often less runway left than anyone realised.

What actually changed

The Digital Markets, Competition and Consumers Act 2024 already contained a subscription contracts regime: clearer pre-signup information, reminder notices before renewal, easier cancellation, a cooling-off period. It was heading for Spring 2027. Then Prime Minister Andy Burnham folded it into a cost-of-living package and pulled the date forward to January 2027. The Department for Business and Trade puts the saving at around £400 million a year, built on an estimate that roughly 10 million of the UK's 155 million active subscriptions are unwanted.

Trade press picked it up fast. NutraIngredients quoted Rheal Superfoods co-founder Sean Ali welcoming “greater clarity and control” for customers, and Vitl founder Jonathan Relph saying Vitl already runs most of the proposed measures. Good signs, both of them. But both quotes come from a legal-compliance angle: what the rule requires, not what it does to the flows that actually deliver it.

The three requirements that land on your Klaviyo account

Strip out the legal language and three things change inside the platform you already run.

• Reminder notices become statutory notices, on a schedule that depends on the contract. The regime requires a reminder on a durable medium, timed to trial conversions and to renewals into a 12-month-or-longer term, with periodic reminders for rolling contracts. The final operational detail will be completed through secondary legislation and guidance. What's already clear: your pre-renewal Klaviyo email can serve as that notice, but only if it's compliant, on time, on a durable medium, and its purpose is immediately obvious. A promotional send doesn't qualify just because it happens to mention renewal.

• Cancellation has to be genuinely straightforward, and online if signup was online. The rule doesn't require an identical interface. A chatbot or form may count, provided the exit is quick and doesn't bury the customer in extra steps. What won't survive is a cancel flow that forces a phone call, or an “email our team and we'll process it within 5 working days,” when signup took two clicks.

• The cooling-off window hits your numbers, not just your legal team. On top of the standard cooling-off period at signup, there's a new 14-day cooling-off right after a free or discounted trial converts, or after a contract of 12 months or more renews, not every renewal. It comes with a refund proportionate to what's already been delivered, for services and digital content alike. That's not an abstract legal risk. It's a line item in revenue recognition and a variable your LTV models don't currently account for.

Why this has teeth

This isn't a rule the CMA will get around to eventually. Since April 2025 it's had direct enforcement powers under the DMCCA: it can investigate and fine a business without going to court first, up to 10% of global annual turnover for serious breaches of consumer protection law. On 18 November 2025 it opened its first wave of direct-enforcement cases, eight of them, over hidden fees, misleading time-limited offers and default opt-ins. None of those touched subscription renewal notices, because that regime hasn't commenced yet. That's the point worth sitting with: a regulator that's already used these powers on ordinary online sales practices isn't going to sit on its hands once the subscription rules go live.

Why this is a decision, not a ticket

Here's where it stops being a legal problem and becomes a CRM Director's problem. Somebody has to decide how these flows get fixed, and there are really only two options.

Option one: treat it as a Q4 roadmap item. Audit the renewal and cancellation flows now, while there's still runway, and rebuild them with the same care you'd give any revenue-critical automation.

Option two: wait for legal to flag it in November, then patch the flows in a compressed sprint that's also fighting Black Friday and Christmas for the same developers and the same agency hours. We've seen this pattern before with GDPR-adjacent work: brands that treat compliance as a planned build end up with a better flow and a calmer Q4. Brands that don't get a rush job squeezed into the busiest six weeks of their year.

That's a governance call, not a task for whoever's free on a Tuesday. It belongs with whoever owns retention.

Don't rebuild every flow. Triage them.

This is where most brands overcorrect: a blanket rebuild of every automation that touches renewal or cancellation, done under time pressure, badly. It's expensive, and it fixes the low-risk flows at the same rate as the high-risk ones.

We already treat compliance as a governance question at VALIX, not just a legal one. It's the same lens we've applied to the DUAA's rules on automated decision-making and to Cyber Essentials readiness. The piece nobody's connected yet is lifecycle flow architecture.

Run your segments through an exposure lens before you touch a single flow. Score them on two things: how many people sit in a segment, and how exposed that segment is under the new rules. In our ABLE-RFM+ segmentation work, two segments consistently come out worst: trial-converters, because the cooling-off window sits directly on top of their conversion moment, and long-tenure auto-renewers, because they've likely been running on the same renewal flow, unaudited, for years while the account moved on to other priorities.

That's the un-copyable part. Two brands with identical flow libraries can have completely different risk profiles, because one has 60% of its list on year-old auto-renewals and the other churns most of its base within six months. A generic “here's how to comply” checklist can't tell you that. Scoring your own segments can. Fix the two highest-exposure segments first and you've dealt with most of your real risk, not just the flows that were easiest to open in Klaviyo.

What to do this week

Pull your renewal, trial-conversion, and cancellation flows and check three things against what's above: does the reminder notice actually fire on schedule and on a durable medium, does cancellation offer a genuinely straightforward online exit if signup was online, and does your refund logic account for a proportionate cooling-off claim on trial conversions and long-term renewals. If you can't answer all three with confidence, that's your Q4 roadmap item, not your November fire drill.

If you want a second pair of eyes on where your exposure actually sits, reply to this newsletter or drop us a message. We'll tell you straight whether it's a light fix or a genuine rebuild, before January makes the decision for you.

FAQs

Is January 2027 actually locked in?

It's the government's announced commencement date, confirmed on 9 August. The secondary legislation and CMA guidance that lock in the operational detail are still to land, so treat the date as fixed and the fine print as still forming.

Does this apply to us if we're not based in the UK?

Yes. The regime applies based on whether you're selling subscriptions to UK consumers, not where your business is registered. A US-based or EU-based brand selling into the UK is in scope the same way a UK-registered one is.

Does this cover every kind of subscription?

No. The regime excludes thirteen categories, among them utilities, insurance and financial services, healthcare, OFCOM-regulated communications, residential rent, package holidays, and gambling. Consumer subscription boxes, DTC supplement and beauty brands, media and content subscriptions, and most SaaS-to-consumer products aren't on that list, so they're in scope.

Does email count as a durable medium?

Generally yes. Under the existing UK definition, it's named explicitly alongside paper. The DMCCA consultation response doesn't confirm it specifically for this regime yet, that detail is coming in guidance. One catch worth knowing: an email that just links out to a webpage carrying the required information likely doesn't count, courts have held that a trader-controlled page can be changed after the fact. The information needs to sit in the email itself.

Does the 14-day cooling-off apply to every renewal?

No. It applies after a free or discounted trial converts, or after a contract of 12 months or more renews. An ordinary monthly renewal on a shorter contract doesn't trigger it.

What's the actual penalty if we get this wrong?

The CMA can investigate and fine a business without going to court first, up to 10% of global annual turnover for serious breaches. It's already used those powers, eight cases opened in November 2025, though not yet against subscription-notice breaches specifically since that regime hasn't commenced.

What's the first thing we should actually do?

Audit your renewal, trial-conversion, and cancellation flows against the three requirements above, then score your segments for exposure before you touch anything. Trial-converters and long-tenure auto-renewers are usually where the real risk sits.

References

GOV.UK, “PM starts roll out of ‘everyday fixes’ on the cost of living: ending rip-off discounts and subscription traps,” 9 August 2026: https://www.gov.uk/government/news/pm-starts-roll-out-of-everyday-fixes-on-the-cost-of-living-ending-rip-off-discounts-and-subscription-traps

GOV.UK, “Government response to consultation on the implementation of the new subscription contracts regime,” 2 April 2026: https://www.gov.uk/government/consultations/consultation-on-the-implementation-of-the-new-subscription-contracts-regime/outcome/government-response-to-consultation-on-the-implementation-of-the-new-subscription-contracts-regime-web-accessible-version

GOV.UK, “Consumers to save around £400 million every year from government crackdown on costly subscription traps,” 2 April 2026: https://www.gov.uk/government/news/consumers-to-save-around-400-million-every-year-from-government-crackdown-on-costly-subscription-traps

Legislation.gov.uk, Digital Markets, Competition and Consumers Act 2024, Part 4, Chapter 2 (subscription contracts): https://www.legislation.gov.uk/ukpga/2024/13/part/4/chapter/2

GOV.UK / CMA, “CMA launches major consumer protection drive focused on online pricing practices,” 18 November 2025: https://www.gov.uk/government/news/cma-launches-major-consumer-protection-drive-focused-on-online-pricing-practices

TLT LLP, “DMCC Act subscription contracts regime brought forward by the PM: What do businesses need to know?,” 11 August 2026: https://www.tlt.com/insights-and-events/insight/dmcc-act-subscription-contracts-regime-brought-forward-by-the-pm-what-do-businesses-need-to-know

NutraIngredients, “UK supplement brands face new subscription rules,” 18 August 2026: https://www.nutraingredients.com/Article/2026/08/18/uk-supplement-brands-face-new-subscription-rules/

Sidley Austin LLP, “New UK Consumer Rules Herald Stricter Enforcement and Significant Fines,” April 2025: https://www.sidley.com/en/insights/newsupdates/2025/04/new-uk-consumer-rules-herald-stricter-enforcement-and-significant-fines

Arnold & Porter, “EU Withdrawal Button, UK Subscription Rules, and Data Protection Risks for U.S. Online Sellers,” May 2026: https://www.arnoldporter.com/en/perspectives/advisories/2026/05/eu-withdrawal-button-uk-subscription-rules-and-data-protection-risks-for-us-online-sellers

Legislation.gov.uk, Digital Markets, Competition and Consumers Act 2024, Schedule 22 (excluded contracts): https://www.legislation.gov.uk/ukpga/2024/13/schedule/22

© VALIX Ltd | All rights reserved | Company registration number: 16669690

Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF

Trading address: Challenge House Business Centre, Sherwood Dr, Bletchley, Milton Keynes, MK3 6DP | Privacy Policy

sales@valix.digital

VALIX is CYBER ESSENTIALS CERTIFIED

Subscribe to our newsletter

By signing up, you agree to receive email communications from VALIX Ltd, including marketing updates, promotional offers, industry insights, and information about our products and services. You understand that your personal information will be handled in accordance with our Privacy Policy, and you may unsubscribe from these communications at any time by clicking the unsubscribe link included in our emails or by contacting us directly.

Join our newsletter for the latest insights & strategies

Resources | Klaviyo FAQs | Blog | Partners | Privacy Policy | About Us