The TAKE IT DOWN Act Is Now the Law of the Land. Here's What That Means for You.

he TAKE IT DOWN Act has been federal law for a while now, but its most operationally significant provisions kicked in on May 19, 2026, and if you run a platform that hosts user-generated content, you need to be ready.

The law does two things: first, it creates a federal criminal prohibition on the nonconsensual publication of intimate images, including AI-generated deepfakes realistic enough that a reasonable person couldn't distinguish them from the real thing (that part went into effect the moment the bill was signed). The person on the hook under that provision is the uploader, not the platform, which is an important distinction. Second, it requires covered platforms to build and maintain a working notice-and-removal process for this content.

What counts as a covered platform is deliberately broad. If your site hosts user-generated content of any kind, including messages, images, video, or audio, and serves the general public, you are almost certainly covered. The Free Speech Coalition's advice is straightforward: assume you're covered and talk to a lawyer.

The removal process itself has real teeth. A valid request requires a signature, identification of the content in question, a good-faith statement that it was published without consent, and the requestor's contact information. Once a valid request lands in your inbox, the clock starts. Platforms have 48 hours to remove the content, and they're also expected to make reasonable efforts to find and pull identical copies. Failure to comply isn't treated as a terms-of-service issue or a policy gap; it's an unfair or deceptive trade practice under the FTC Act, which means the Federal Trade Commission can come knocking.

One thing the law gets right, and that the adult industry has argued for years: consent to create an image is not consent to distribute it. That principle is now codified at the federal level. One thing the law conspicuously does not address is what platforms are supposed to do when a removal request turns out to be fraudulent or erroneous. That gap is real, and it's worth watching.