The TAKE IT DOWN Act Is Now Enforced: Platform NCII Duties and FTC Penalties in 2026
FTC enforcement of the TAKE IT DOWN Act began May 19, 2026. Covered platforms must remove non-consensual intimate imagery and AI deepfakes within 48 hours — or face per-violation penalties.
The TAKE IT DOWN Act became federal law on May 19, 2025, and its platform obligations are now live: covered online platforms had until May 19, 2026 to build a notice-and-removal process for non-consensual intimate imagery (NCII), and the Federal Trade Commission began enforcing Section 3 of the Act on that date. When a covered platform receives a valid removal request from an identifiable individual, it must remove the depiction — and make reasonable efforts to remove known identical copies — within 48 hours. The Act covers both authentic intimate images shared without consent and AI-generated 'digital forgeries' (deepfakes) depicting real, identifiable people. The FTC treats a failure to comply as an unfair or deceptive act under the FTC Act, with a civil penalty of up to $53,088 per violation, and in May 2026 the agency sent warning letters reminding platforms of the deadline. The criminal provisions in Section 2 — which criminalise knowingly publishing NCII, including AI deepfakes — took effect on enactment and are enforced by the Department of Justice. For brands and marketers the Act is not an ad-policy rule, but it reshapes the platforms they operate on: covered platforms including major social networks are building faster takedown systems, AI-generated creative carries heightened scrutiny, and synthetic-media governance is now a board-level compliance topic. Treat it alongside the EU AI Act's synthetic-content labelling and state deepfake laws. Track enforcement on the <a href="/policy-tracker">Policy Change Tracker</a>.
The TAKE IT DOWN Act Moves From Law to Enforcement
The TAKE IT DOWN Act became federal law on May 19, 2025. One year later, on May 19, 2026, its most consequential obligation went live: covered online platforms must now operate a notice-and-removal process for non-consensual intimate imagery (NCII), and the Federal Trade Commission began enforcing that obligation on the same date. When a covered platform receives a valid removal request, it must take down the depiction — and make reasonable efforts to remove known identical copies — within 48 hours.
This is not an advertising rule, and it imposes no direct duty on marketers. But it reshapes the platforms brands operate on, raises the stakes for AI-generated creative, and confirms a direction of travel: platform content governance is now a measured, federally enforced obligation rather than a voluntary commitment. For brands, the Act belongs on the same risk map as the EU AI Act's synthetic-content labelling rules and the growing body of state deepfake laws.
"Covered platforms must remove nonconsensual intimate imagery within 48 hours of a valid request — and the FTC began enforcing that duty on May 19, 2026.
— Federal Trade Commission guidance, May 2026"
This guide covers what the Act requires, the compliance timeline, how the FTC enforces it, the criminal provisions, the treatment of AI deepfakes, what it means for brands and marketers, and a compliance checklist. To monitor enforcement see the Policy Change Tracker.
What the TAKE IT DOWN Act Requires of Platforms
The Act has two operative parts: a criminal prohibition and a platform removal duty. The platform duty is the one now under active FTC enforcement.
The Notice-and-Removal Duty
- Build a process: Covered platforms must operate a process by which an identifiable individual — or an authorised representative — can request removal of a non-consensual intimate visual depiction.
- 48-hour removal: On receiving a valid request, the platform must remove the depiction within 48 hours.
- Known identical copies: The platform must make reasonable efforts to identify and remove known identical copies of the depiction.
- Clear notice: Platforms must provide a clear and conspicuous explanation of how to submit a request.
What a Valid Request Generally Includes
| Element | Requirement |
|---|---|
| Requester | The depicted individual or an authorised person |
| Signature | Physical or electronic signature |
| Identification | Identify the content and information sufficient to locate it |
| Good-faith statement | Statement that the depiction is non-consensual |
The 48-hour clock and the "known identical copies" duty are the operationally demanding parts, requiring both responsive intake and duplicate-detection technology at scale. For the US framework see the United States compliance guide.
The Compliance Timeline: May 2025 to May 2026
The Act gave platforms a defined runway. The criminal provisions applied immediately; the platform duty had a one-year build window.
Key Dates
| Event | Date |
|---|---|
| TAKE IT DOWN Act signed into law | May 19, 2025 |
| Criminal provisions (Section 2) effective | On enactment (May 19, 2025) |
| Platform notice-and-removal process required (Section 3) | May 19, 2026 |
| FTC enforcement begins; warning letters sent | May 19, 2026 |
Platforms that treated the one-year window as optional are now exposed: the obligation is live, and the FTC has signalled through warning letters that it expects functioning processes to be in place. To track regulator activity see the Policy Change Tracker.
FTC Enforcement: Section 3, Penalties, Warning Letters
The Act routes platform non-compliance through the FTC's existing authority over unfair or deceptive acts and practices, rather than creating a wholly new enforcement regime.
The Enforcement Mechanics
- Section 5 vector: A failure to comply with the removal duty is treated as an unfair or deceptive act under the FTC Act, letting the FTC investigate, seek penalties, and pursue injunctive relief with existing tools.
- Per-violation penalty: Civil penalty exposure is up to $53,088 per violation — the FTC Act's inflation-adjusted maximum — and instances can be counted separately, so systematic non-compliance compounds.
- Warning letters: In May 2026 the FTC publicly reminded platforms of the deadline and sent warning letters, signalling active scrutiny.
A note on precision: the FTC's enforcement vector now reaches major platforms, and aggregated early-signal data has associated TAKE IT DOWN Act enforcement activity with large platforms including Meta — but a warning letter or enforcement vector is not the same as a final penalty against a named platform. The defensible reading is that enforcement is active and the penalty exposure is real and per-violation. To audit your own content governance use the AI Compliance Audit.
The Criminal Provisions and Who Enforces Them
Separate from the FTC-enforced platform duty, the Act creates federal criminal offences enforced by the Department of Justice.
What Section 2 Criminalises
- Authentic NCII: Knowingly publishing intimate visual depictions of an identifiable individual without consent.
- Digital forgeries: The same prohibition extends to AI-generated "digital forgeries" — synthetic depictions that appear authentic.
- Threats: Threatening to publish such depictions is also addressed.
- Effective immediately: Unlike the platform duty, the criminal provisions applied on enactment in May 2025.
The two-track structure — criminal liability for those who publish, civil liability for platforms that fail to remove — is what makes the Act comprehensive. For brands, the criminal track is a reminder that synthetic intimate imagery is now squarely illegal at the federal level, reinforcing the case for governance over any synthetic likeness use. To check creative against platform and legal risk use the Keyword Risk Checker.
AI Deepfakes and Synthetic Intimate Imagery
One of the Act's most significant features is that it erases the legal distinction between authentic and AI-generated non-consensual imagery.
Why the Deepfake Inclusion Matters
- Digital forgeries covered: A sexually explicit deepfake of a real, identifiable person falls within both the criminal prohibition and the 48-hour removal duty, the same as an authentic image.
- Detection burden: Platforms must handle AI-generated forgeries within the same window — raising hard questions about detection, verification, and the risk of both under-removal and over-removal.
- Part of a wider regime: The deepfake dimension connects to the EU AI Act's labelling rules, US state deepfake and synthetic-performer laws, and FTC AI-advertising-deception cases.
A marketer using generative AI in creative is not the target of this Act, but operates in the same tightening regime where synthetic content is increasingly regulated. For the EU labelling angle see our EU AI Act Article 50 analysis.
What the Act Means for Brands and Marketers
The Act imposes no direct advertiser obligation, but it reshapes the platforms brands operate on and the synthetic-media environment they work within.
Four Practical Implications
- Faster, more automated platforms: Covered platforms are rebuilding takedown infrastructure to meet the 48-hour duty, and more automated enforcement can have collateral effects, including occasional over-removal of legitimate content.
- Synthetic-media governance: AI-generated creative now sits in a regulated context — govern how synthetic likenesses and AI imagery are produced and disclosed.
- Adjacency and reputation: Algorithmic association with NCII or deepfake content is a severe brand-safety failure; the Act raises both its salience and the speed platforms are expected to act.
- Regulatory signal: Read alongside platform-accountability enforcement in Australia and the EU as evidence that platform content governance is now measured and enforced.
The defensible posture: govern your own use of synthetic media, ensure any user-generated content you control has its own takedown process, and verify brand-safety controls on the platforms you use. For the US framework see the United States compliance guide.
TAKE IT DOWN Act Compliance Checklist
- [ ] Assessed whether your service is a "covered platform" against the statutory definition
- [ ] Notice-and-removal process built and clearly published (if a covered platform)
- [ ] 48-hour removal workflow operational and tested
- [ ] Duplicate-detection capability in place for "known identical copies"
- [ ] Intake validates requester, signature, content identification, good-faith statement
- [ ] Synthetic-media governance policy covers AI likeness and deepfake production
- [ ] Marketing AI creative reviewed against EU AI Act labelling and state deepfake laws
- [ ] Brand-safety / adjacency controls verified on platforms used for advertising
- [ ] Legal assessment obtained where covered-platform status is uncertain
- [ ] FTC and DOJ enforcement monitored on the Policy Change Tracker
For multi-jurisdiction stress-testing use the Legal Compliance Scan and to audit creative use the AI Compliance Audit.
Don't miss the next policy change.
Create a free account — track every policy change across 8 platforms, get instant alerts, and access every free compliance tool. Or try our Meta Rejection Predictor first.
Report Keywords — Run AI Compliance Audit
Related Posts
Deepfake Political Ads 2026 — Platform-by-Platform Detection, Disclosure & Advertiser Liability
Deepfake political ads 2026: where seven platform policies diverge, when FCC and FEC rules apply, and how advertiser liability shifts when synthetic likenesses appear in paid placements.
DSA Article 22 Trusted Flagger Q2 2026: Designations, Notice Velocity, Platform Response SLA & Advertiser Implications
Article 22 Trusted Flagger designations are reshaping platform takedown velocity across the EU. The framework requires platforms to prioritise notices from designated flaggers — with material implications for advertiser content removal risk.
EU AI Act Article 50 Ad Creative Disclosure May 2026: Deployer Obligations, Watermarking & August 2 Enforcement
Article 50 of the EU AI Act enters force on August 2 2026. Brands deploying AI-generated ad creative must disclose synthesis and preserve machine-readable watermarks or face fines up to €15M.