Running a membership business means taking on legal and tax obligations that a one-time-sale business never faces: a continuous billing relationship, ongoing custody of member data, and revenue that has to be recognized across time rather than at the register. The core areas to get right are entity choice, the member agreement, federal and state rules on recurring charges, privacy and payment security, tax treatment of dues and advance payments, and chargeback exposure. Each is manageable on its own; the trouble comes from missing one.
Pick an Entity That Fits the Model
A limited liability company or corporation separates business debts from the owners’ personal assets. If the organization gets sued or can’t pay its bills, creditors generally can’t reach the founders’ personal accounts or property. That protection is the main reason most membership businesses incorporate rather than operate as sole proprietorships or general partnerships.
An S-corporation election avoids double taxation. Income and losses pass through to shareholders’ personal returns instead of the corporation paying tax and shareholders paying again on dividends.1Internal Revenue Service. S Corporations The liability shield is the same as a standard corporation, but eligibility is capped at 100 shareholders with restrictions on who can own shares.
Nonprofit membership organizations typically pursue tax-exempt status. Section 501(c)(3) covers charitable, educational, and religious purposes; 501(c)(6) covers business leagues, chambers of commerce, and professional associations.2Office of the Law Revision Counsel. 26 USC 501 – Exemption From Tax on Corporations, Certain Trusts, Etc. Both restrict how the organization distributes assets: no part of net earnings can benefit any private individual, which shapes how dues and other revenue can be used.
Licensed professionals face an added constraint. Many states require doctors, lawyers, accountants, and similar practitioners to form a professional LLC rather than a standard one, with ownership and management limited to licensed individuals and the business generally restricted to the licensed services.
Write a Membership Agreement That Prevents Disputes
The membership agreement is the contract that governs the entire relationship. A few provisions matter more than the rest.
Scope and Tier Definitions
Spell out exactly what the member receives at each price point. If you sell a basic tier and a premium tier, list the specific benefits in each. Vague language like “access to premium content” invites later arguments over what was promised. Courts look for clear mutual understanding, and specificity is the simplest way to establish it.
Termination and Cancellation
State how much notice a member must give, whether any early cancellation fee applies, and what happens to prepaid fees if you change or discontinue a service. From the organization’s side, the agreement should also explain when the business can revoke a membership, such as for code-of-conduct violations.
Liability Waivers
Membership organizations that involve physical activity or facility access often use liability waivers. Courts tend to enforce them when the language is specific and narrowly focused. A waiver covering injuries from gym equipment is more likely to hold up than a blanket clause trying to shield the business from all negligence claims. A waiver also loses force when the risk was hidden or not something a reasonable person would have anticipated when joining.
Follow Federal Rules on Recurring Billing
The biggest regulatory trap is how you handle recurring charges. Under the Restore Online Shoppers’ Confidence Act, any business that uses negative option billing online has to do three things: clearly disclose all material terms before collecting payment information (including price, that charges recur, and how often), obtain the consumer’s express informed consent before charging the account, and provide a simple way to stop recurring charges.3Office of the Law Revision Counsel. 15 USC 8403 – Negative Option Marketing on the Internet
The third requirement gets underestimated most often. “Simple mechanisms” means the cancellation process cannot be dramatically harder than signing up was. If someone joined online in two clicks, requiring a phone call during business hours followed by a retention pitch is the kind of friction that draws enforcement actions.
The FTC announced a Click-to-Cancel rule in late 2024 that would have made these requirements more specific, but a federal appeals court vacated it in July 2025. As of 2026, the FTC relies on ROSCA and Section 5 of the FTC Act, which broadly prohibits unfair or deceptive trade practices, to police subscription billing. The agency has issued a new advance notice of proposed rulemaking and continues to bring enforcement cases under existing authority. The specific Click-to-Cancel regulations are not in effect, but the underlying obligations remain and the FTC is actively watching.
Layer On State Automatic Renewal Laws
A majority of states have their own automatic renewal statutes. They vary in specifics but share a common structure: clear pre-purchase disclosures about the recurring nature of charges, a confirmation of consent, and a reasonably accessible cancellation method. Several states explicitly require that a consumer who signed up online must be able to cancel online.
Penalties range from mandatory refunds of all charges collected after an improperly disclosed renewal to significant per-violation fines. Some state attorneys general actively enforce these laws, and several states have strengthened requirements in recent years. Because membership businesses typically serve customers across many states, the practical approach is to build billing and cancellation processes around the strictest applicable requirements rather than maintain a different flow for each state.
Protect Member Data
Membership organizations collect the categories regulators care most about: names, contact details, payment credentials, and usage patterns that reveal preferences. That triggers obligations at several levels.
Privacy Regulations
If your membership attracts customers in the European Union, the General Data Protection Regulation applies regardless of where your business is located. Under Article 3, any company offering goods or services to people in the EU or monitoring their online behavior falls within scope.4Your Europe. Data Protection Under GDPR That means clear privacy notices, proper consent for data processing, and giving members the ability to access and delete their information.
Domestically, several states have enacted comprehensive consumer privacy laws granting residents rights to know what data a business collects, request deletion, and opt out of sale of their information. These laws apply based on where the member lives, so a national membership base will typically trigger obligations in multiple jurisdictions.
Payment Card Security
Any organization processing credit card transactions must comply with the Payment Card Industry Data Security Standard. PCI DSS v4.0 is the current active version, with its full set of requirements in effect as of March 2025.5PCI Security Standards Council. PCI Security Standards Council It covers encryption, secure network architecture, access controls, and ongoing monitoring. Card networks and payment processors can impose fines directly or terminate your ability to accept cards, which would be fatal for a recurring-billing business.
Breach Notification
All 50 states, the District of Columbia, Puerto Rico, and the U.S. Virgin Islands have data breach notification laws. If a security incident exposes member data, you’ll need to notify affected individuals and, in many states, the state attorney general within a specified timeframe. There is no single federal breach notification law for most businesses, so deadlines and procedures depend on where members reside. The FTC recommends checking both state and federal requirements for your industry.6Federal Trade Commission. Data Breach Response: A Guide for Business
Handle the Tax Side of Recurring Revenue
Sales Tax and Economic Nexus
Since the Supreme Court’s 2018 decision in South Dakota v. Wayfair, states can require businesses with no physical presence to collect and remit sales tax once they exceed an economic activity threshold. The most common benchmark is $100,000 in sales or 200 separate transactions in the state. A membership business with customers spread across the country can trip these thresholds in multiple states.
Whether the fees themselves are taxable depends on what you sell. Physical facility access, like a gym or coworking space, is taxable in most states. Digital subscriptions and streaming services are taxed in a growing number of jurisdictions, though coverage is far from universal. Tracking member addresses accurately is essential, and many membership businesses use automated tax calculation software for that reason.
When to Recognize Membership Revenue
Timing depends on your accounting method. Cash-basis reports income when payment hits the account. Accrual reports it when earned, regardless of when the money arrives.7Internal Revenue Service. Publication 538 – Accounting Periods and Methods
For accrual-basis businesses, IRS regulations provide a deferral method for advance payments. If you collect an annual membership fee upfront, only the portion earned during the current tax year is included in that year’s income; the remainder goes into the following year. The IRS illustrates this with a shopping club that collects a one-year fee in December: one-twelfth is income in the year of receipt, and eleven-twelfths shift to the next tax year.8eCFR. 26 CFR 1.451-8 – Advance Payments for Goods, Services, and Certain Other Items Getting this wrong overstates or understates income and creates problems with the IRS either way.
Unrelated Business Income for Nonprofits
Tax-exempt status doesn’t shield all income. If a nonprofit earns income from a trade or business that is regularly carried on and not substantially related to its exempt purpose, that income is subject to unrelated business income tax.9Internal Revenue Service. Unrelated Business Income Tax A professional association selling magazine advertising is a common example.
The code allows a $1,000 specific deduction against unrelated business taxable income.10Office of the Law Revision Counsel. 26 USC 512 – Unrelated Business Taxable Income An exempt organization with $1,000 or more in gross unrelated business income must file Form 990-T, and organizations expecting to owe $500 or more must make estimated payments.9Internal Revenue Service. Unrelated Business Income Tax This is on top of the regular annual information return. Nonprofits that diversify through events, merchandise, or partnerships should evaluate each income source for UBIT exposure.
Keep Chargebacks Under Control
Recurring billing is inherently prone to chargebacks. Members forget they subscribed, don’t recognize a charge on their statement, or get frustrated with cancellation and go straight to their bank.
Under the Fair Credit Billing Act, a consumer has 60 days after the billing statement is sent to submit a written dispute to the card issuer. The issuer must acknowledge within 30 days and resolve the investigation within two billing cycles, no longer than 90 days.11Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors During the investigation, the issuer cannot try to collect the disputed amount or report it as delinquent. A single billing complaint can lock up revenue for months.
Visa and Mastercard both monitor merchants for excessive chargeback rates. Starting April 2026, Visa’s Acquirer Monitoring Program sets the “excessive” threshold at 1.5% of transactions with a minimum of 1,500 dispute events per month. Merchants over that level face an $8 fee on every disputed transaction and risk having their processing accounts closed. Most payment processors set internal limits well below that official threshold to protect their own standing.
The most effective way to keep rates low is to make cancellation genuinely easy. A member who can’t figure out how to cancel will often file a chargeback instead, which costs you the revenue plus a dispute fee and pushes your ratio the wrong way. Sending a short billing reminder a few days before each renewal also cuts down on the “I don’t recognize this charge” disputes that make up a meaningful share of subscription chargebacks.