TAKE IT DOWN Act

Federal law criminalising publication of non-consensual intimate imagery, including AI-generated deepfakes. Covered platforms must operate a notice-and-removal process and take down reported content and known copies within 48 hours; civil provisions enforced by the FTC from 19 May 2026.

JurisdictionUnited States
CategoryPrivacy & Data Protection
StatusActive
Effective date
Latest development

Analysis

The TAKE IT DOWN Act is a U.S. federal law (Public Law 119‑12) that criminalizes non‑consensual intimate imagery (NCII), including AI‑generated deepfakes, and creates a civil notice‑and‑removal regime enforced by the FTC for covered platforms starting 19 May 2026.TAKE IT DOWN Act – Congress.govTAKE IT DOWN Act – CRS Legal SidebarComplying With the Take It Down Act – FTC Business Guidance

Below is a structured compliance analysis aligned with your requested sections. Every factual claim includes direct, clickable links to primary or highly authoritative sources.

Key Requirements

1. Criminal prohibition on non‑consensual intimate imagery (including deepfakes)

2. Civil notice‑and‑removal regime for covered platforms

3. FTC enforcement and penalties (civil section)

4. Scope: covered platforms and content

Compliance Challenges

1. Identifying “digital forgeries” and deepfakes at scale

2. Verification and fraud prevention in removal requests

3. Meeting the 48‑hour removal deadline and tracking “known identical copies”

4. Multi‑jurisdictional alignment (state NCII laws, global privacy rules)

5. Real examples and early enforcement signals

Implementation Best Practices

(These are implementation recommendations informed by primary legal requirements and official guidance; where prescriptive steps are inferred, I indicate the underlying sources.)

1. Governance and policy framework

  • Adopt a formal NCII/Take It Down policy that:
  • Defines “intimate visual dep

Recent developments

  • — A June report said the Take It Down Act was now in full effect and asked what comes next for tech firms. It noted that companies face financial and criminal penalties if they do not remove nonconsensual intimate images within 48 hours after notice. (source)
  • — County officials summarized the law’s requirements and noted that digital platforms had one year to establish appeal and removal processes after enactment. The piece reflects the broader public-sector view that the law imposes new compliance duties on online services. (source)
  • — The FTC announced it began enforcing the TAKE IT DOWN Act and launched a complaint portal for victims to report platforms that fail to remove nonconsensual intimate images or fail to provide a removal process. The agency said covered platforms must remove the material and known identical copies within 48 hours of a valid request. (source)
  • — The FTC’s business guidance says enforcement of Section 3 began and explains the obligations for covered platforms under the law. It emphasizes notice-and-removal requirements and the need for a clear process for people to request takedown. (source)
  • — FTC Chairman Andrew N. Ferguson sent compliance reminder letters to more than a dozen technology companies ahead of the deadline. The letters warned that platforms must provide conspicuous notice and remove qualifying content within 48 hours of a valid request. (source)
  • — Senators Amy Klobuchar and Ted Cruz marked one year since enactment and highlighted the start of FTC enforcement. Their statement framed the law as a tool against nonconsensual intimate imagery, including AI-generated NCII. (source)
  • — The Verge reported that the law’s takedown requirements took effect on May 19, 2026, making the compliance deadline active for social platforms. The article also noted potential civil fines exceeding $53,000 per violation. (source)
  • — An industry compliance analysis said the one-year grace period had expired and platforms without a documented NCII takedown process were exposed to FTC enforcement. It also argued that the law creates immediate operational pressure for platforms hosting user-generated content. (source)
  • — A later-updated overview article states that the first conviction under the law occurred in April 2026 in Ohio involving AI-generated NCII. This is not as authoritative as official or mainstream reporting, but it suggests early enforcement activity beyond platform compliance. (source)

Related regulations

Put it into practice

Browse all regulations · Compliance deadlines · Latest updates