Take It Down Act Compliance Deadline Is Tomorrow — What Every Platform Must Have Ready by May 19

Tomorrow, May 19, the TAKE IT DOWN Act’s one-year grace period expires. Any platform that hosts user-generated content and has not implemented a compliant notice-and-takedown system by end of day will be subject to FTC enforcement starting May 20. This is not a proposed rule or a soft deadline — it is federal law with civil penalties attached.

What the law requires

The TAKE IT DOWN Act (Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks) was signed by President Trump on May 19, 2025. It covers “any website, online service, or mobile application that provides a forum for user-generated content or regularly deals in intimate imagery” — which is a deliberately broad definition that pulls in social networks, forums, adult content platforms, messaging apps, cloud storage services, and potentially developer platforms that allow image hosting.

Three specific obligations apply from tomorrow:

Public takedown mechanism — a discoverable, functional channel through which subjects can submit takedown requests for non-consensual intimate imagery (NCII).
48-hour removal — upon receiving a valid request, the platform must remove the flagged content within 48 hours.
Reasonable efforts to remove copies — platforms must make a good-faith effort to identify and remove known duplicates and reposts of the same content.

Critically, the law makes no distinction between authentic photos or videos and AI-generated deepfakes depicting identifiable individuals without consent. Both categories are covered equally.

Penalties

Criminal exposure for individuals who distribute NCII: up to 2 years imprisonment for adult victims, up to 3 years for content depicting minors.

For platforms, the FTC has civil enforcement authority. The current penalty ceiling is $53,088 per violation — and each piece of non-compliant content or each failed takedown can constitute a separate violation. The FTC has stated publicly that this enforcement priority comes directly from the White House.

Who’s at risk

CBS News testing conducted in April found that Grok, xAI’s AI assistant, was still generating non-consensual intimate imagery on request despite xAI’s January 2026 pledge to prevent it. That test result makes xAI a likely early enforcement target given the political and reputational dynamics involved.

Beyond obvious AI image generators, risk exposure is highest for platforms that:

Lack a documented, public-facing NCII report channel
Have removal processes taking longer than 48 hours at current throughput
Have no automated scanning for re-uploads of previously flagged content

What to do if you’re not ready

There is no compliant path that doesn’t involve shipping the takedown mechanism. Platforms that are still building should prioritize a functional manual review channel over a polished one — a form that routes reports to a human reviewer who can action them within 48 hours satisfies the letter of the law. An elegant self-serve portal that takes three months to build does not.

If your platform is materially out of compliance tomorrow and you’re under FTC scrutiny, document every step of your remediation effort. Demonstrated good-faith remediation has historically influenced the FTC’s enforcement posture in civil cases.

This law has been coming for a year. The deadline is tomorrow.