The Take It Down Act: What It Means for Creators
Since May 2026, most US platforms that host user uploads have had to remove reported non-consensual intimate images within 48 hours, with the Federal Trade Commission enforcing it. That is a real change. It is also narrower than the headlines suggest for creators whose content was sold, and knowing exactly where the line falls decides which request you file.
The Take It Down Act was signed on 19 May 2025, and its platform rules became enforceable a year later. On 19 May 2026 the Federal Trade Commission said it would enforce them immediately, with civil penalties of up to $53,088 per violation. For anyone whose intimate images have been posted without consent, that is the strongest US removal tool there has ever been.
For creators, the important question is narrower: which of your problems does it actually solve? The honest answer is "some of them, very well", and knowing which saves you filing the wrong request.
This is general information, not legal advice. If you are dealing with a serious case — threats, extortion, or someone you know — talk to a lawyer.
What the law does
It has two separate parts, and people often blur them together.
- A crime
- Knowingly publishing intimate images of an identifiable adult without consent, under the conditions the law sets out — including AI-generated forgeries — is a federal offence.
- A platform duty
- Covered platforms must run a notice-and-removal process and take reported images down within 48 hours of a valid request, along with known identical copies.
The platform duty is the part most creators will use. It does not depend on anyone being prosecuted. You file a request; the platform must act.
Which platforms it covers
The law defines a "covered platform" as a public website or app that primarily provides a forum for user-generated content — or one that regularly publishes non-consensual intimate images, whatever its format. It excludes internet providers, email, and sites whose content is mainly preselected by the site rather than uploaded by users.
That second limb is worth noticing. A site built around publishing this material cannot escape the definition by claiming it is not a user-upload platform.
What a valid request must contain
- Your signature Physical or electronic.
- Where the image is Enough information for the platform to identify and locate it — the exact links.
- A statement of non-consent A brief statement that the image was published without your consent, with any relevant information.
- How to reach you Your contact details.
Once a valid request arrives, the platform must remove the image as soon as possible and no later than 48 hours, and make reasonable efforts to find and remove known identical copies.
Where it helps creators — and where it does not reach
Here is the line that matters. The criminal offence for real images applies only where, among other conditions, what is shown "was not voluntarily exposed by the identifiable individual in a public or commercial setting". The law also says that consenting to an image being created does not mean consenting to it being published.
Put those together and the picture for creators looks like this:
| What happened | How well the Act fits |
|---|---|
| Private photos or videos you never published, shared by someone else | Strong. This is what the law was written for. |
| AI-generated or faked intimate images of you | Strong. "Digital forgeries" are covered explicitly. |
| Content made privately, then posted by a former partner | Strong. Consent to creation is not consent to publication. |
| Paid content from your page, copied and reposted | Unclear. You exposed it in a commercial setting. Use copyright. |
| A recording of your public cam show | Unclear. It was broadcast commercially. Use copyright. |
Many platforms draw the same line in their own rules. Reddit's policy on non-consensual intimate media says it does not apply to media distributed commercially with the consent of those depicted, and points to its copyright process instead. Google's intimate-imagery removal covers consented content only where it has not been commercialised. The usual direction is clear: protections for non-consensual imagery are built for material that was never meant to be public. There are exceptions — Discord's policy explicitly covers imagery copied from paywalled sites — but they are platform choices, not something the law guarantees.
The practical rule. For paid content that was copied, file a copyright notice — it is the route that clearly fits. Where a leak mixes paid content with private material, or includes fakes, file both: copyright for the paid items, a Take It Down request for the rest.
None of this makes copyright the weaker option. A copyright notice does not depend on how the content was first shared, and platforms have handled them at scale for decades. The two routes simply protect different things.
How to file
Look for the platform's non-consensual intimate imagery report, or a request option named after the Act. On X, for example, you can report a post through its menu under "Private or Non-Consensual Content", then "Report content under the US Take It Down Act", or use X's dedicated help-centre form. X does not require you to have an account to report, and commits to removing valid reports within 48 hours. For X's copyright route, and what it forwards to the person who posted, see removing your content from X.
- Capture everything first The exact link to each post, a screenshot showing the image and the link together, and the date. Posts can disappear and reappear at new addresses.
- Use the right report The non-consensual imagery or Take It Down option, not a general abuse report. A general report may not be treated as a request under the Act at all.
- Include all four elements Signature, location, the statement of non-consent, contact details. A request missing one gives the platform a reason to treat it as incomplete.
- Note the time Write down when you submitted. If nothing has happened after 48 hours, follow up and keep the record.
- Check for copies Platforms must make reasonable efforts on identical copies, not near-copies. Edited or cropped versions may need their own report.
Make the statement honestly. A request built on a claim you know to be untrue is the fastest way to undermine your own credibility with a platform's trust and safety team — and to put yourself in a worse position than the person you are reporting.
What the law cannot do
- It is US law. Leak sites operated offshore that already ignore copyright notices will generally ignore this too. For those, search removal is often the only lever that works — see removing leaked content from Google Search.
- It does not stop re-uploads by itself. Identical copies must be handled; altered copies may not be caught. Monitoring still matters.
- It does not settle the commercial-content question. Until courts or regulators address it, assume copyright is your route for anything you sold.
Outside the US, other countries have their own instruments, some of them stronger for this purpose than anything in US law. Brazil's Marco Civil da Internet, for example, makes a platform liable if it fails to remove unauthorised intimate content after being notified — no court order needed.
Putting it together
For most creators, the Take It Down Act is not a replacement for anything — it is a second tool for the situations copyright handles badly: private material, ex-partners and deepfakes. For the far more common case of paid content being copied, the copyright route remains the one to rely on, and the DMCA notice templates cover every element it needs.
The order of operations when something leaks — evidence, notices, search, hosting — is set out in the first 24 hours after a leak.