The TAKE IT DOWN Act: What Platforms Are Now Required to Do About Non-Consensual Images

The TAKE IT DOWN Act's criminal provisions — making it a federal crime to publish non-consensual intimate imagery, real or AI-generated — took effect the moment President signed the bill in May 2025. Its other major component operates on a completely different track: a compliance obligation imposed directly on platforms, with its own separate deadline, its own specific technical requirements, and its own enforcement agency.

What Actually Makes a Service a "Covered Platform"

The law's platform-side obligations don't apply to every website or app that happens to host user content — they apply specifically to what the statute defines as a "covered platform," generally understood to mean a website, online service, or application that hosts user-generated content at a scale and in a manner where non-consensual intimate imagery could realistically be posted and spread. This framing is meant to capture the social media platforms, image and video hosting services, and similar user-content platforms the law's authors had centrally in mind, without necessarily sweeping in every conceivable website that technically allows any user input at all. In practice, any platform with meaningful user-upload functionality and real user reach has strong reason to treat itself as covered rather than assume it falls outside the definition on a technicality.

The Compliance Deadline and What It Actually Required

Covered platforms were given a one-year runway from the law's May 19, 2025 signing to build and deploy the required compliance infrastructure, landing the actual deadline at May 19, 2026. What had to be built by that date was a specific "notice-and-removal" process: a mechanism by which a person depicted in non-consensual intimate imagery — or, in some cases, an authorized representative acting on their behalf — can submit a request identifying the specific content and asserting it was published without consent, triggering the platform's obligation to act.

The 48-Hour Clock

The compliance requirement's most concrete, quantifiable element is its removal timeline: once a platform receives a valid takedown request, it has 48 hours to remove the identified content. This is a considerably tighter window than the notice-and-takedown timelines under other content-related laws platforms are more historically familiar with — the DMCA's copyright takedown process, for comparison, doesn't impose anything close to a fixed 48-hour statutory deadline the way this law does. The tighter deadline reflects the specific harm the law is targeting: unlike a copyright dispute, where the underlying harm from delay is primarily economic, delay in removing non-consensual intimate imagery compounds an ongoing, actively spreading privacy and dignity harm to a real, identifiable person with every additional hour the content stays live and shareable.

Who Enforces This, and What Happens If a Platform Doesn't Comply

The Federal Trade Commission is the enforcement authority for the platform-compliance side of the law, treating a covered platform's failure to establish or properly operate the required notice-and-removal process as a violation subject to FTC penalties — a separate legal track entirely from the criminal prosecution track that applies to the individual who actually published the non-consensual content in the first place. This split enforcement structure means a platform can face regulatory consequences for inadequate compliance infrastructure even in a case where the original publisher of the content is never identified or prosecuted at all — the platform's compliance obligation exists independently of whether the underlying criminal case against the poster ever goes anywhere.

Why This Structure Is Actually a Meaningful Design Choice

Placing a hard, specific compliance deadline and a specific enforcement agency behind the platform-removal requirement — rather than simply criminalizing the underlying conduct and leaving platforms to voluntarily decide how quickly to respond to reports — closes a gap that has historically undermined similar protections in other contexts: a legal right to request removal is considerably less valuable in practice if there's no enforceable deadline attached and no consequence for a platform that simply lets requests sit unprocessed. By giving the FTC direct authority to penalize inadequate compliance, separate from the criminal prosecution of whoever posted the content, the law creates pressure on platforms to build genuinely functional reporting and removal systems proactively, rather than treating user reports as a discretionary, best-effort process with no real deadline attached.

What This Means If You're Trying to Get Something Taken Down

For someone who discovers non-consensual intimate imagery of themselves posted on a covered platform after the May 2026 compliance deadline, the practical entitlement is now specific and enforceable rather than merely a matter of a platform's internal, voluntary content policy: a documented request, a 48-hour clock, and an FTC enforcement mechanism standing behind a platform's obligation to actually meet that clock — a materially stronger legal position than existed before this law's platform-compliance provisions took effect.