Understanding the Take It Down Act

On May 19, 2025, President Trump signed the Take It Down Act into law, making it a federal crime to publish nonconsensual intimate images — including those generated by artificial intelligence. The law represents the most significant federal response yet to the growing crisis of deepfake pornography and image-based sexual abuse. For millions of Americans who have had their likenesses exploited without consent, this legislation creates new criminal penalties and a practical mechanism for getting harmful content removed from the internet.

What the Take It Down Act Does

The Take It Down Act addresses two critical gaps in existing law. First, it establishes federal criminal penalties for anyone who knowingly publishes, or threatens to publish, intimate images of a person without their consent. This includes both real photographs and videos taken without permission, as well as AI-generated deepfake intimate imagery that depicts a real, identifiable person. Offenders face up to three years of imprisonment and significant fines.

Second, the law creates a mandatory notice-and-removal framework for online platforms. Covered platforms — which include social media sites, content hosting services, and websites that allow user-generated content — are required to establish a process through which victims can request the removal of nonconsensual intimate images. Platforms must take down flagged content within a defined timeframe once a valid removal request is submitted.

The Compliance Deadline

Platforms were given one year from the date of signing to establish their removal processes. That means the compliance deadline was May 19, 2026. Any covered platform that fails to implement a functioning notice-and-removal system after this date is in violation of the law. If you submit a removal request and a platform does not respond or refuses to act, they may face enforcement action.

Who Is Protected

The law protects any identifiable individual whose intimate images are published or threatened to be published without their consent. This includes:

• Adults who have been victims of revenge pornography or nonconsensual sharing of intimate images
• Minors who are depicted in any form of intimate imagery, whether real or AI-generated
• Public figures whose likenesses have been used to create deepfake pornography
• Anyone whose face or likeness has been digitally inserted into intimate content using AI tools

The law includes reasonable exceptions for law enforcement activities, legal proceedings, and content used for legitimate medical or educational purposes. These carve-outs ensure the law targets exploitation rather than sweeping up legitimate uses of imagery.

The Scale of the Problem

The Take It Down Act was passed in response to an alarming surge in nonconsensual intimate imagery, driven largely by advances in AI. Deepfake pornography has exploded in volume over the past several years, with researchers estimating that the vast majority of deepfake videos online are nonconsensual intimate content targeting women. The tools required to create such content have become increasingly accessible, with free apps and open-source models allowing virtually anyone to generate realistic fake intimate images from a handful of social media photos.

Students, teachers, military personnel, public figures, and ordinary individuals have all been targeted. In many cases, victims had no effective legal remedy before this law was enacted — state laws varied widely, and no federal statute directly addressed the issue.

First Enforcement Actions

The Department of Justice has already demonstrated its willingness to enforce the Take It Down Act. In one of the first major actions under the new law, the DOJ seized the domains of CFAKE and SOCFAKE, two of the internet's largest websites dedicated to hosting deepfake pornographic content. These sites allowed users to upload photos of real people and generate fake intimate images, and they hosted enormous libraries of nonconsensual deepfake pornography targeting celebrities, public figures, and private individuals alike.

The seizures sent a clear signal that federal authorities intend to aggressively pursue both the platforms that host this content and the individuals who create and distribute it.

How to Use This Law to Protect Yourself

If you discover that nonconsensual intimate images of you — real or AI-generated — have been published online, here is how to take action under the Take It Down Act:

1. Document the content: Take screenshots with timestamps showing the URL, the platform, and the content itself. Preserve this evidence before requesting removal, as the content may be taken down and become harder to reference later.
2. Submit a removal request: Contact the platform directly using their notice-and-removal process. As of May 2026, covered platforms are legally required to have such a process in place. Look for it in the platform's safety center, reporting tools, or terms of service.
3. File a complaint with the FBI: If you believe a crime has been committed, report it to the FBI's Internet Crime Complaint Center at ic3.gov. Include all documentation you have gathered.
4. Contact the Cyber Civil Rights Initiative: The CCRI provides resources, crisis support, and referrals for victims of nonconsensual intimate imagery. Their helpline can guide you through both the legal and emotional aspects of the process.
5. Consult an attorney: An attorney specializing in cyber exploitation or privacy law can advise you on both criminal reporting and potential civil claims for damages.

Connection to Broader Privacy Protections

The Take It Down Act does not exist in isolation. It is part of a broader shift toward stronger privacy protections at both the federal and state levels. Laws like the Kids Online Safety Act address platform accountability for minors. State laws in California, Texas, and other states have added their own penalties for deepfake creation and distribution. And data privacy regulations like the CCPA and GDPR give individuals more control over their personal information.

Together, these laws reflect a growing recognition that digital privacy is not optional — it is a fundamental right. But legislation alone cannot prevent every instance of abuse. Reducing your personal data exposure online makes it harder for bad actors to target you with deepfakes in the first place, because they need source images, personal details, and identifying information to create convincing fakes.

Services like PrivacyOn complement legal protections like the Take It Down Act by proactively removing your personal data from data broker and people-search sites. By reducing the amount of personal information and imagery available about you online, PrivacyOn makes it significantly harder for anyone to target you with nonconsensual deepfakes or other forms of image-based exploitation.