TAKE IT DOWN Act: What Adult Creators Need to Know
the law finally caught upOn May 19, 2026, the TAKE IT DOWN Act’s platform compliance window closed: every covered platform in the US must now run a notice-and-removal system for nonconsensual intimate imagery — including AI deepfakes — and act on a valid notice within 48 hours. In plain English: what the law does, what it doesn’t, and how to use a takedown notice now that the system is live.
What the TAKE IT DOWN Act actually does
The full name is “Tools to Address Known Exploitation by Immobilizing Technological Deepfakes On Websites and Networks Act” — hence TAKE IT DOWN. It became Public Law 119-12 on May 19, 2025, after passing the Senate unanimously and the House 409–2. It has two main parts.
It is now a federal crime to knowingly publish a nonconsensual intimate visual depiction of an identifiable adult, including a “digital forgery” — a deepfake or other AI-generated image. Maximum prison terms: up to 2 years where the victim is an adult, up to 3 years for a minor, plus fines and restitution. The criminal provisions took effect immediately at signing in May 2025.
Live since May 19, 2026. A “covered platform” — generally a public website, service, or app hosting user-generated content — must run a notice-and-removal process. On receiving a valid notice from a depicted person, the platform has 48 hours to remove the depiction and make reasonable efforts to remove identical copies. The FTC enforces this part: failure to reasonably comply is an unfair or deceptive practice under the FTC Act.
Platforms get liability protection when they remove content in good faith based on a notice — even if it turns out the depiction shouldn’t have been removed. That gives platforms a legal incentive to err on the side of removal. For creators, that’s a double-edged sword — more below.
Sources: S.146 bill text on Congress.gov, Skadden client alert, RAINN summary.
What the law does NOT do
This is where honesty matters more than hype. Real progress, not a silver bullet.
None of that is an argument against using the law. It’s an argument for knowing how it actually works — so you can use it correctly and push back when it gets misused against you.
How to send a TAKE IT DOWN notice
A plain-language template:
The 48-hour clock starts when the platform receives a valid notice — an incomplete one can reset the clock, so get it complete the first time.
Deepfakes and AI-generated content under the law
The Act defines “digital forgery” to include depictions created or altered by software, machine learning, or AI that, when viewed, are indistinguishable from an authentic image of the actual person, depicting them doing something they didn’t do.
In plain language: someone puts your face on someone else’s body with AI and the result looks real — covered. It doesn’t matter that the body isn’t yours or that no actual act occurred. AI-generated NCII is treated the same as real NCII for both the criminal and takedown halves.
This is not theoretical: in November 2025 the Senate Commerce Committee announced the first conviction under the Act in an AI-deepfake case.
If a platform refuses or delays removal
How creators can prepare (before you need it)
The international gap
If content is hosted on a non-US site, look up the host country’s NCII process — and local internet-law attorneys are worth their fees.
Where this fits in a platform-risk strategy
NCII risk is one form of platform risk; account suspensions, policy changes, and payment-processor pulls are others. Operating across multiple platforms reduces single-point-of-failure exposure for all of them. Platforms also vary in how visibly they publish their NCII process — know which of yours make filing easy before you need to file. Pair this with the DMCA writer for stolen paid content — the two laws cover different problems and often both apply.
FAQ
The criminal provisions took effect May 19, 2025 at signing. The platform notice-and-removal requirements took effect May 19, 2026 — one year later — and are now live.
Yes. “Digital forgery” includes AI-generated and software-altered images indistinguishable from an authentic image of you. Deepfake NCII is treated the same as real NCII in both halves of the law.
48 hours from receiving a valid notice — including reasonable efforts to remove identical copies.
No private right of action. It’s a federal crime (US Attorney prosecutes) plus a platform duty (FTC enforces). To sue the poster, use state revenge porn laws, copyright, or privacy torts — ask a lawyer.
FTC complaint at reportfraud.ftc.gov, your state attorney general, and possible state-law civil action. The CCRI Helpline (1-844-878-2274) can help you plan next steps.
Generally no. For foreign-hosted content, look to the EU DSA, UK Online Safety Act, or the host country’s NCII process — cross-border NCII remains a real gap.
Generally public sites, services, and apps hosting user-generated content, plus services designed to publish NCII. Reported exclusions include broadband providers, email services, and curated-content platforms. The exact contours will be tested in early FTC enforcement.
Educational use only — not legal advice, and no attorney-client relationship. Laws change, and how a law applies depends on facts only your own lawyer can evaluate. If you are dealing with NCII, harassment, or a takedown affecting your livelihood, talk to a licensed attorney in your jurisdiction. Free 24/7 crisis support: CCRI Image Abuse Helpline, 1-844-878-2274.
Stolen paid content is a copyright problem — build that takedown in minutes.
Write the notice →Screenshot first, report second. Evidence disappears fast.