There is common sense legislation that exists out there that is extremely simple: just require that you must allow users the exact same methodology and as easy to cancel as they did to sign up. Signed up with 3 clicks online? Need to be able to cancel with 3 clicks online. No exceptions.