Jurisdictional Guide: Laws That Override Unfair T&C Terms
United States — Federal Laws
| Law | Protection | Key Provision |
|---|---|---|
| FCBA (Fair Credit Billing Act) | Credit card billing errors | 60-day dispute window from statement. $50 max liability for unauthorized charges. Right to withhold disputed amount while under investigation. T&C cannot shorten this. |
| TILA (Truth in Lending Act) | Disclosure of credit terms | Billing rights must be disclosed in writing. Finance charges itemized. Contract terms explained in a meaningful way. |
| FTC Click-to-Cancel (Oct 2024) | Subscription cancellation | Cancel must be as easy as sign-up. Same medium (online sign-up = online cancel). Negative option rules for consent. T&C cannot require phone-only cancel for online sign-ups. |
| EFTA / Reg E | ACH/debit transactions | Pre-authorized transfers require written authorization. Notice required before varying amounts. Debit surcharges prohibited in many states. |
| CARD Act 2009 | Credit card protections | No unfair fee increases in first year. 45-day notice required for significant changes. Payment allocation rules. |
United States — State Laws
| State | Key Law | What It Overrides |
|---|---|---|
| California | ARL (eff. Jul 2025) + CLRA | Auto-renewal must be in bold before checkout. Annual reminders required. Unconscionable terms not enforceable. |
| New York | GBL 527-a | Auto-renewal disclosure + consent. 30-day refund window on automatic renewals. |
| All states | UDAP laws | Prohibits unconscionable or deceptive contract terms. Each state has its own version. |
International Protections
| Jurisdiction | Key Law | What It Overrides |
|---|---|---|
| EU | Consumer Rights Directive | 14-day cooling-off period for online purchases. T&C cannot reduce this. Arbitration + class waiver void. |
| EU | GDPR | Right to erasure (Art. 17) — includes payment tokens if they identify you. Data minimisation requirements. |
| UK | Consumer Rights Act 2015 | Unfair terms assessed for fairness. Standard form terms not individually negotiated may be challenged. |
| Australia | ACL + Privacy Act | Unfair contract terms in standard form contracts are void. Must destroy personal info when no longer needed. |
What This Means for You
Even if a T&C contains these clauses, federal and state laws may override them:
- FCBA gives 60 days to dispute regardless of what the T&C says
- FTC Click-to-Cancel means you can cancel online even if the T&C says phone-only
- EU 14-day cooling-off can't be waived by a "no refund" clause
- State UDAP laws may void "conclusive records" and "sole discretion" clauses
- GDPR right to erasure can force token deletion even if the T&C says they keep it
Key takeaway: A T&C clause is not automatically enforceable. Check your jurisdiction's protections before accepting unfair terms.