That's just what's in the summary. The actual policy [1] spells this out in more detail with examples:
> ROSCA requires negative option sellers to provide a simple, reasonable means for consumers to cancel their contracts. To meet this standard, negative option sellers should provide cancellation mechanisms that are at least as easy to use as the method the consumer used to initiate the negative option feature. For example, to ensure compliance with this simple cancellation mechanism requirement, negative option sellers should not subject consumers to new offers or similar attempts to save the negative option arrangement that impose unreasonable delays on consumers’ cancellation efforts. In addition, negative option sellers should provide their cancellation mechanisms at least through the same medium (such as website or mobile application) the consumer used to consent to the negative option feature. The negative option seller should provide, at a minimum, the simple mechanism over the same website or web-based application the consumer used to purchase the negative option feature. If the seller also provides for telephone cancellation, it should provide, at a minimum, a telephone number, and answer all calls to this number during normal business hours, within a short time frame, and ensure the calls are not lengthier or otherwise more burdensome than the telephone call the consumer used to consent to the negative option feature.
Just responded to another comment to the same effect, but this is neither a law nor a regulation, but rather a policy statement, probably so they can get away with not having to go through APA-mandated notice-and-comment rulemaking, so it's deliberately framed as recommendations for how to comply with existing rules/statutes rather than creation of new ones.
these recomendations are addmisable in court, if yiu want to get a lawyer involved about your lack of satisfaction. Or even if you are a lawyer trying for a class action lawsuit.
They'd be admissible, but mostly just in an advisory sense. Policy documents like this don't, themselves, have the force of law, they just suggest the agency's preferred interpretation of existing statutes or regulations. That does matter -- if said existing statute or regulation is ambiguous, and the way the agency interprets it is a plausible one, courts will often defer to the agency's judgment as to how to resolve the ambiguity (these are called Chevron and Auer deference, respectively for statutes and regulations). But a court could also find that the existing law isn't ambiguous, or the agency's interpretation isn't plausible, or that the policy position constitutes new law that requires APA rulemaking, so they're not bound by a document like this necessarily.
In general "should" is a recommendation, not a requirement.
"shall" indicates a requirement
"should" indicates a recommendation
"may" is used to indicate that something is permitted
"can" is used to indicate that something is possible, for example, that an organization or individual is able to do something
If you don't mind me asking, what's the point of "should"? Usually anything that is not a hard requirement is promptly ignored, so I'm not clear why is time devoted to create "should" statements.
The way they've framed this is not that it's a new rule, but rather, a statement as to how they intend to enforce the existing rules that are already on the books, and a "recommendation" to regulated entities as to what actions they should/shouldn't take in order to not suffer negative enforcement consequences (in other words, it's not "the rule is now that you must do this," but rather "just FYI, our interpretation of current rules/statutes/whatever is that behavior X is already prohibited, so if you don't want to get in trouble with us for failing to comply, you really ought to do this").
This is advantageous to the agency if they can get away with it because new rulemaking involves a bunch of extra, lengthy process under the Administrative Procedures Act (they have to publish a bunch of drafts and collect public comments on them, then address any substantive comments they receive, etc.).
Should allows for someone who has a real exception that we can't even think of to explain themselves. Maybe such a thing doesn't exist, I can't think of it. But just in case you have an out.
Those words actually differ in these sorts of documents but are used as "terms of art".
Shall is a mandatory requirement.
Should implies a goal and is non-mandatory.
Must is not often used, since it really doesn't seem different from Shall.
Everyone is responding with quotes from IETF and ISO documents. But this is a legal context, and it is not necessarily the case that they have the same technical meaning. I too wonder what the answer to your question is.
"Should" means that there are scenarios where doing something is not necessary, and therefore really does not constitute a hard requirement. "Shall" means that you are inherently required to do something; it is much closer (if not identical) in meaning to "must". "Should" is the subjunctive mood; there is an implied "if" somewhere in there: You should do this if blah blah blah, I would do this if blah blah blah, etc.
There are probably some subtle connotational differences between "shall" and "must" that the average reader would not care about (and which I don't feel like figuring out)
My two cents. "Shall" and "must" seem identical at face value, but functionally they are quite different.
Compare "You shall not pass this spot!" with "You must not pass this spot!" The former is a straightforward command. This is what must (not) be done, period. The latter has a strong additional implication that "If you insist upon passing the spot, something bad will happen to someone."
If you're at a party drunkenly acting out and your host comes to you and says, "You shall leave right this instant" there isn't any choice in the matter. It's a forgone conclusion that you will leave, end of discussion. "You must leave right this instant" sounds like we want you to leave, and if you don't, there will assuredly be regrettable, albeit unstated consequences.
So, "must" tends to have an implication that a detrimental outcome will definitely happen if the exhortation is disregarded. Yet statutes and contracts usually use "shall." I think this is largely traditional. One must obey the King's Law, not because of any penalty, but because it is the King's Law. But it also has an operational advantage -- it separates the command from the implication of assured penalty. One might think that implying an assured penalty is better, so what gives?
Well, a typical statute might read, "All documents shall be submitted in black ink. All submissions shall total no more than 10 pages." If the shalls were replaced with musts, it would sound as though any invalid submission will be rejected out of hand. But just leaving them as pure "shall" commands gives legislators flexibility in crafting a penalty as weak or strong as desired. E.g. "Failure to adhere to any of the preceding requirements may result in the submission being rejected." We might punish you, or maybe not. Or perhaps, "failure to comply shall result in any pages after the tenth page deemed defective and omitted from consideration." There's a consequence, but as long as you're ok with it, go right ahead. Sometimes legislative sessions wind up deleting the passage with the penalty and then you're left with a "shall" with no penalty at all.
> ROSCA requires negative option sellers to provide a simple, reasonable means for consumers to cancel their contracts. To meet this standard, negative option sellers should provide cancellation mechanisms that are at least as easy to use as the method the consumer used to initiate the negative option feature. For example, to ensure compliance with this simple cancellation mechanism requirement, negative option sellers should not subject consumers to new offers or similar attempts to save the negative option arrangement that impose unreasonable delays on consumers’ cancellation efforts. In addition, negative option sellers should provide their cancellation mechanisms at least through the same medium (such as website or mobile application) the consumer used to consent to the negative option feature. The negative option seller should provide, at a minimum, the simple mechanism over the same website or web-based application the consumer used to purchase the negative option feature. If the seller also provides for telephone cancellation, it should provide, at a minimum, a telephone number, and answer all calls to this number during normal business hours, within a short time frame, and ensure the calls are not lengthier or otherwise more burdensome than the telephone call the consumer used to consent to the negative option feature.
[1] https://www.ftc.gov/system/files/documents/public_statements...