Skip to content

Menu

LexBlog, Inc. logo
NetworkSub-MenuBrowse by SubjectBrowse by PublisherJoin the NetworkGet StartedSubscribeSupport
Contact Us
Search
Close

From Click to Contract: When Courts Enforce Online Terms

By Timothy A. Butler, Matthew White, Tessa Cierny & Cody B. Davis on July 14, 2026
Email this postTweet this postLike this postShare this post on LinkedIn
terms and conditions shutterstock_2464112241

Table of Contents

  • Design Practices Courts Have Enforced
  • Design Practices Courts Have Rejected
  • Practical Takeaways

Recent decisions from the Second, Sixth, Seventh, and Ninth circuits, as well as California appellate courts, confirm a consistent rule: online terms are enforceable when users receive reasonably conspicuous notice of the terms and take an action that clearly manifests assent. Courts have applied this rule through a granular, interface-focused analysis, producing a developing body of considerations for online contract formation.

Below is a synthesis of key holdings showing what courts have accepted — and rejected — as sufficient notice and assent.

Link to Design Practices Courts Have Enforced Design Practices Courts Have Enforced

Courts have consistently enforced online terms where the interface tightly couples clear, proximate disclosure with an affirmative action that signals agreement. Accordingly, stakeholders may wish to take the following actions:

  • Place terms near the action button. Courts may find notice reasonably conspicuous where the terms appear immediately below or near the action button and the button expressly conveys agreement to the hyperlinked terms.
  • Make the hyperlink visually obvious. Notice may be adequate, and assent unambiguous, where the hyperlink appears directly above or below the action button in contrasting text — such as larger font, contrasting color, and underlining — on an uncluttered screen that clearly calls attention to the terms.
  • Tell users that clicking means acceptance. Notice may be reasonably conspicuous where the checkout page is simple; the disclosure clearly states that submitting an order or pressing the action button constitutes acceptance of the terms (e.g., “By clicking agree, I acknowledge and accept . . .”); and the hyperlink to the terms is visually distinct.
  • Avoid jargon. Use clear labels instead of acronyms — for example, “Terms of Service” instead of “TOS” — so a reasonably prudent user can understand what the interface language means and recognize common website conventions for hyperlinked terms and privacy notices.
  • Maintain adequate records. Preserve records showing that each version of the registration, checkout, or sign-in process provided adequate disclosures and acceptance mechanisms, as well as the date and means by which each user accepted the terms.

Link to Design Practices Courts Have Rejected Design Practices Courts Have Rejected

Conversely, courts have rejected terms where either notice or assent — or both — break down due to poor design or ambiguity:

  • Passive hyperlinks without affirmative action. Browsewraps may be unenforceable where the hyperlink appears on every page, but users are not prompted to act or otherwise notified of the terms; proximity alone may be insufficient without assent.
  • Inconspicuous design and small font. Disclosures may be found unenforceable, and consent ambiguous, where the terms are not reasonably conspicuous — for example, where they appear in small gray font that does not resemble a typical blue hyperlink or are obscured by other content.
  • Failure to clearly tie user action to assent. Terms may be found unenforceable, and no contract formed, where users are not clearly advised that their actions signal agreement and the disclosures are insufficiently conspicuous.
  • Confusing multi-screen flows. Sign-in wrap agreements may be unenforceable where multiple sign-up screens make it unclear that clicking “Continue” constitutes agreement to the terms, especially where disclosures are not prominently displayed.

Link to Practical Takeaways Practical Takeaways

Taken together, recent case law confirms that enforceable online terms require clear, conspicuous notice placed near the relevant action, coupled with an unambiguous manifestation of assent tied to that action.

  • Notice may fail where terms are merely available, inconspicuous, or detached from the transaction.
  • Assent may fail where the user’s action is not explicitly tied to agreement or where the interface creates ambiguity as to what the user is accepting.
  • Notice and assent may be satisfied where the disclosure is clear, proximate, and visually prominent, and the user takes an action expressly linked to agreement (even without a checkbox).

Online contract formation now depends as much on interface design as on legal drafting. Courts ask not only what the terms say, but whether a reasonable user had a fair opportunity to notice and accept them. Companies should consider their user enrollment, checkout, and sign-in flows to confirm notice and assent are unmistakable — and may wish to preserve records showing the user journey, including when and how users accepted the terms.

Photo of Timothy A. Butler Timothy A. Butler

Tim Butler helps companies thrive by developing tailored strategies to address their regulatory compliance challenges and vigorously defending them in government enforcement actions and bet-the-company lawsuits.

A former prosecuting attorney for the Federal Trade Commission (FTC) and former senior official in the Georgia…

Tim Butler helps companies thrive by developing tailored strategies to address their regulatory compliance challenges and vigorously defending them in government enforcement actions and bet-the-company lawsuits.

A former prosecuting attorney for the Federal Trade Commission (FTC) and former senior official in the Georgia Attorney General’s Office, Tim has led the defense of dozens of government investigations and enforcement actions brought by the FTC, the Consumer Financial Protection Bureau (CFPB), and the various state attorneys general. Tim also regularly defends clients in bet-the-company lawsuits, including complex business disputes and consumer class actions alleging privacy, false advertising, and unfair or deceptive business practice claims.

Tim is an experienced guide for companies struggling with regulatory complexity. He offers clear advice that helps his clients meet the demands of the ever-growing set of laws and regulations governing data privacy and cybersecurity, advertising and marketing practices, and consumer financial products and services. Clients rely on Tim’s business-minded and practical strategies to address their most difficult regulatory compliance challenges.

A graduate of the University of Chicago and Stanford Law School, Tim is a prolific author and regularly speaks to industry and trade groups about the evolving privacy landscape, about cutting-edge issues affecting payments and fintech companies, and about developments at the FTC, the CFPB, and within the state attorneys general community.

Read more about Timothy A. ButlerEmailTimothy's Linkedin Profile
Show more Show less
Photo of Matthew White Matthew White

Matt White guides clients through regulatory compliance challenges and represents clients in regulatory and civil investigations and litigation.

Matt has counseled fintech and payment companies on regulatory compliance matters, including those involving the Electronic Fund Transfer Act, the Fair Credit Reporting Act, the…

Matt White guides clients through regulatory compliance challenges and represents clients in regulatory and civil investigations and litigation.

Matt has counseled fintech and payment companies on regulatory compliance matters, including those involving the Electronic Fund Transfer Act, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the Truth in Lending Act, and their respective implementing regulations (Regulations E, V, P, and Z). Adept with the Consumer Financial Protection Bureau’s (CFPB) Prepaid Rule, Matt has provided guidance regarding prepaid cards and related compliance.

Matt has also aided clients in developing regulatory compliant products and functionalities, including an earned wage access program, reimbursement prepaid card programs, new merchant cash advance products, and tokenized payment capabilities. In connection with products on which Matt advises, he has also negotiated high-stakes technology sales agreements involving complex regulatory issues, including compliance with data privacy laws, financial regulations, and card network rules.

Beyond helping clients strategize for regulatory complexity, Matt also helps clients navigate government investigations and enforcement actions brought by the Federal Trade Commission (FTC), CFPB, and state attorneys general.

Read more about Matthew WhiteEmailMatthew's Linkedin Profile
Show more Show less
Photo of Tessa Cierny Tessa Cierny

Tessa Cierny advises companies on financial technology and data privacy issues. She has experience counseling companies on state and federal regulatory compliance, including existing and emerging privacy laws, such as the E.U.’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act

…

Tessa Cierny advises companies on financial technology and data privacy issues. She has experience counseling companies on state and federal regulatory compliance, including existing and emerging privacy laws, such as the E.U.’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as well as financial and banking regulations, such as the CFPB’s Section 1071 Small Business Lending Rule (Regulation B). In addition, she assists clients in defending business disputes and data breach litigation.

Prior to joining Greenberg Traurig, she served as global records manager for WestRock, where she developed and implemented email and data retention policies for global data privacy regulation compliance. In this role, she also advised on data privacy concerns related to data retention, data loss prevention, and data governance.

Read more about Tessa CiernyEmailTessa L.'s Linkedin Profile
Show more Show less
Photo of Cody B. Davis Cody B. Davis

Cody Davis advises clients on regulatory compliance, data privacy, and consumer protection matters within the financial technology sector, with a focus on payments, emerging platforms, and evolving regulatory frameworks. He works with companies navigating complex federal and state requirements, including regulatory compliance, government…

Cody Davis advises clients on regulatory compliance, data privacy, and consumer protection matters within the financial technology sector, with a focus on payments, emerging platforms, and evolving regulatory frameworks. He works with companies navigating complex federal and state requirements, including regulatory compliance, government investigations, and risk management across the fintech ecosystem.

Cody also has prior experience working with clients in the health care space on mergers and acquisitions as well as regulatory compliance with HIPAA, state telehealth rules, and facility licensure requirements.

Read more about Cody B. DavisEmailCody B.'s Linkedin Profile
Show more Show less
  • Posted in:
    Technology and AI
  • Blog:
    Data Privacy Dish
  • Organization:
    Greenberg Traurig, LLP
  • Article: View Original Source

Call us at 1-800-913-0988 or email sales@lexblog.com.

Facebook LinkedIn Twitter RSS
Library at LexBlog
  • About LexBlog
  • The Field We Built
  • Library at LexBlog
  • Our Beliefs
  • Our Team
  • Contact LexBlog
  • Disclaimer
  • Editorial Policy
  • Terms of Service
  • Get Started
  • Publishing Solutions
  • Compass
  • Submit a Request
  • Support Center
  • System Status
Copyright © 2026, LexBlog, Inc. All Rights Reserved.
Law blog design & platform by LexBlog LexBlog Logo