For consumer-corporate disputes, learning to leverage New York's regulatory state is a bit of a superpower. Basically, sending in a written complaint with the regulator copied and then having them open a regulatory-investigatory file is real leverage because even if you're full of shit, it's going to burn legal dollars on the other side. That, in turn, makes a letter to the company threatening regulatory escalation as the next step land seriously.
This is why the sidewalks next to city parks take forever to get shoveled after a big snow storm.
What needs to happen for rules like this is: 1. the complaint should be easy/automatic to validate and rule on, 2. hard for the company to appeal and stonewall, and 3. the fine money should go to the person who filed the complaint as a bounty to motivate people to look for violators.
(It's worth noting that the city does sometimes enforce new regulations well, and in a way that the public is aware of. For example, businesses in the city are required to accept hard cash as payment, and the penalties for not doing so can be significant. Friends have told me that the city is very proactive about responding to those complaints. Anecdotally, the city has also become much better about responding to some forms of illegal parking and idling over the past few years. It certainly helps when the incentives are aligned, i.e. the cost of the enforcement program is supported by the fines collected.)
Assuming that you pay with a credit card, I would assume you could dispute the charge on the basis that they're violating the law and win any faceoff immediately on that basis.
The example of a yearly subscription paid monthly should make this obvious. You can't exit this arrangement after 6 months and expect to simply not pay the remaining 6 months, as the contract was for a whole year. All this law does is force the business to make it easy for you to cancel any auto-renew for a second year. But if the business doesn't do that and you dispute a payment, how hard do you expect your bank to work to figure out if this payment was for a part of the original contract, or for an auto-renewal you should have been able to easily canceled, but haven't?
Failing to provide salary transparency in job postings is another common one with zero enforcement.