At the time of enrollment, merchants must require the cardholder to expressly consent to entering an ongoing subscription service for recurring payments.