The TAKE IT DOWN Act Is Now Being Enforced. Here's What It Actually Does For You.

On May 19, 2026, the FTC officially began enforcing the TAKE IT DOWN Act, a federal law signed a year earlier that criminalizes publishing non-consensual intimate imagery — including AI-generated deepfakes — and requires platforms to remove it within 48 hours of a valid request. The next day, the agency sent formal warning letters to twelve companies operating AI "nudify" tools, warning that continued non-compliance could trigger civil penalties of more than $53,000 per violation. If you create adult content for a living, this law is worth understanding in detail, because it is one of the few pieces of recent legislation written with your specific situation in mind rather than against it.

What the law actually does

The TAKE IT DOWN Act, signed in May 2025, does two things. First, it creates a federal criminal offense for publishing non-consensual intimate imagery, with penalties of up to two years for content involving an adult victim and up to three years where a minor is involved. Second, it requires "covered platforms" — a broad category that includes the sites and social networks creators actually use — to stand up a notice-and-removal system and take down a validly flagged image, plus known identical copies, within 48 hours of a request. Platforms had one year from enactment to build that system. The FTC's enforcement authority over platforms that fail to comply became active on the anniversary of the signing, which is why May 2026 is the date that matters.

As of this writing, the FTC's enforcement has taken the form of warning letters — to the twelve nudify-app operators, and earlier, reminder letters to fifteen major platforms including Meta, Google, TikTok, Snapchat, and Reddit about their notice-and-removal obligations. No fines or consent orders have been publicly announced yet. That will likely change as the agency moves from warnings to cases, but it is worth being accurate about where enforcement actually stands today rather than assuming penalties have already landed.

The principle that matters most: consent to creation is not consent to publication

The operative idea behind this law is one every creator should have in their back pocket. Content you made consensually — with a partner, a collaborator, or on a platform you chose — does not become fair game the moment someone else decides to redistribute it without your permission. That is a distinct legal claim from copyright, and it matters because copyright can get complicated when the redistributed material is AI-generated rather than a direct copy of something you filmed. The TAKE IT DOWN Act gives you a claim based on being the person depicted, not just the person who holds the copyright.

This is directly relevant to two situations creators increasingly deal with: content leaked or redistributed outside the platform where it was originally posted, and AI-generated deepfakes that use a creator's face or likeness without consent. Both now have a federal takedown mechanism with a hard 48-hour deadline, on top of whatever DMCA or platform-specific reporting tools already existed.

How to actually use this if it happens to you

• Document before you report. Screenshot the infringing content, the URL, and the date you found it, before you file anything. Platforms move faster with a complete, specific request.
• File with the platform first. "Covered platforms" are required to offer the notice-and-removal process directly — this is usually the fastest path, not a separate government filing.
• Use the FTC's complaint channel for platforms that ignore you. The FTC has launched a dedicated consumer complaint intake for TAKE IT DOWN Act issues. If a platform is not honoring the 48-hour window, that is the appropriate next step.
• Treat this as one tool, not the only tool. DMCA takedowns, platform-specific abuse reporting, and hash-matching services that block re-uploads of registered images all still apply and can be used alongside this law, not instead of it.

What's still unsettled

Digital rights groups, including the EFF, have raised concerns about the law's 48-hour compliance window and the lack of safeguards against bad-faith takedown requests — concerns similar to longstanding criticism of DMCA abuse. As of now, this is advocacy criticism rather than a legal challenge that has produced a ruling, and no verified cases of the law being weaponized against creators have surfaced. It is worth knowing this critique exists, but it should not stop you from using the law for its intended purpose if you need it.

Where this connects

Creator to CEO's chapter on risk management treats identity risk — doxing, leakage, and unauthorized use of your likeness — as one of three core categories of business risk every creator has to actively manage, not something to hope never happens. A federal takedown mechanism with a real deadline is a meaningful addition to that toolkit. If you want the fuller framework for thinking about platform, identity, and reputational risk as distinct, manageable business variables, see Creator to CEO and the full book series.