For a year, the TAKE IT DOWN Act was a law with a countdown attached. On May 19, 2026, the countdown hit zero. Every covered online platform in the United States is now legally obligated to give people a way to report non-consensual intimate images — including AI-generated deepfakes — and to remove them within 48 hours. The Federal Trade Commission has started enforcing, and it has already put the largest platforms on notice.
This is the first federal law in America to squarely target the intersection of generative AI and intimate-image abuse. Here is what it actually requires, and why it matters well beyond the companies it names.
What the Law Does
The TAKE IT DOWN Act was signed into federal law in May 2025. It has two halves. The first is a criminal prohibition on knowingly publishing non-consensual intimate imagery, whether the image is a real photograph or a computer-generated "digital forgery" of an identifiable person.
The second half — Section 3 — is the part that reshapes how platforms operate. It creates a nationwide notice-and-removal obligation, and it is enforced by the FTC. Section 3 is what carried the May 19, 2026 compliance deadline.
The law's core promise is blunt: if an intimate image of you is posted without consent, you can demand its removal, and the platform has 48 hours to comply.
The 48-Hour Rule
Under Section 3, a covered platform must build a process that lets any person request the removal of an intimate image shared without their consent. Once it receives a valid request, the platform has 48 hours to remove the content — and to make reasonable efforts to remove known identical copies of the same image.
The obligation is specific. Platforms must make the request process easy to find and use, provide an identifying number for each takedown request, and tell the requester whether the reported content was removed — including an explanation when they decide not to remove something.
That last requirement quietly closes a common loophole. A platform cannot simply ignore a request into a void; it has to respond and justify inaction.
Who Counts as a "Covered Platform"
The definition is deliberately broad. It reaches social media, messaging apps, image- and video-sharing services, and even gaming platforms. The FTC's guidance frames it this way: if your business primarily provides a forum for user-generated content, or regularly publishes, curates, hosts, or furnishes intimate content shared without consent, you likely fall under the law.
In practice that sweeps in far more than the household-name networks. Forums, niche communities, dating apps, and hosting services all sit inside the tent.
The FTC Is Not Waiting
This is not a law waiting for its first test case. FTC Chairman Andrew Ferguson sent letters directly to a roster of the biggest platforms — Alphabet, Amazon, Apple, Automattic, Bumble, Discord, Match Group, Meta, Microsoft, Pinterest, Reddit, SmugMug, Snapchat, TikTok, and X — reminding them of their obligation to comply fully no later than the May 19 deadline.
The financial stakes are concrete. Platforms that violate the law can face FTC enforcement carrying civil penalties of up to $53,088 per violation. For a service processing thousands of takedown requests, the arithmetic escalates quickly.
| Requirement | Detail |
|---|---|
| Compliance deadline | May 19, 2026 |
| Removal window | 48 hours from a valid request |
| Scope of removal | Reported image plus known identical copies |
| Enforcer | Federal Trade Commission |
| Penalty | Up to $53,088 per violation |
Why the AI Angle Is the Whole Point
Notice-and-takedown regimes are not new — copyright has had one for decades. What makes the TAKE IT DOWN Act different is that it treats a synthetic image of a real person as harmful in the same way a real photo is.
That framing arrived alongside a wave of litigation over exactly this harm. Lawsuits filed in 2026 have accused generative platforms of enabling users to fabricate sexually explicit images of real, identifiable people — in some alleged cases, of minors. The law's inclusion of "digital forgeries" is a direct legislative answer to the reality that a modern image model can manufacture convincing abuse material in seconds.
The Hard Questions the Law Leaves Open
The Act is not without critics, and the concerns are worth stating plainly rather than dismissing.
The 48-hour clock creates pressure to over-remove. Faced with penalties and a short window, the rational move for a platform is to take content down first and evaluate later. Digital rights groups have warned this could sweep up lawful speech, satire, or journalism, especially where automated matching flags "identical copies" imperfectly.
There is also a verification problem. A robust takedown system needs to confirm that a requester is who they claim to be, without itself becoming a tool for harassment or a new honeypot of sensitive personal data. Building that well is genuinely hard.
And enforcement will test the breadth of "covered platform." Small operators may lack the legal sophistication to know they are covered at all, let alone build a compliant workflow in time.
Supporters counter that these are implementation problems, not reasons to leave victims without recourse — and that the harm of leaving non-consensual imagery online, propagating across copies, is severe and time-sensitive in a way that justifies a fast default. Both things can be true: the mechanism can be imperfect and still be a meaningful improvement over the prior status quo, in which victims often had no leverage at all.
What Platforms Should Have Done — and What Users Can Now Do
For any service hosting user content, the compliance checklist is now table stakes: a clearly visible reporting mechanism, a tracked request system with identifying numbers, a documented 48-hour removal workflow, a process for finding identical copies, and a records trail showing good-faith responses.
For everyone else, the practical takeaway is simpler and more empowering. If an intimate image of you — real or AI-generated — is posted without your consent on a U.S. platform, you now have a federal right to demand its removal, and the platform has two days to act.
The Bottom Line
The TAKE IT DOWN Act converts a moral consensus — that non-consensual intimate imagery, including AI fakes, should come down fast — into an enforceable federal deadline with real penalties. It is not a perfect instrument; the tension between speed and accuracy is unresolved, and the definition of who must comply will be litigated for years. But as of May 19, 2026, the burden has shifted. Platforms can no longer treat intimate-image abuse as someone else's problem, and the FTC has made clear it intends to hold them to it.
This article covers a sensitive subject. If you or someone you know is affected by non-consensual intimate imagery, resources and reporting tools are available through the platforms named above and organizations such as the Cyber Civil Rights Initiative.
