The TAKE IT DOWN Act, Explained: What the New Federal Takedown Law Means for Creator Platforms
Most of the takedown process creators are familiar with runs through copyright law — a DMCA notice, filed because someone re-uploaded content the creator owns. A newer federal law covers a different, narrower problem: intimate images and videos, including AI-generated ones, posted or shared without the depicted person’s consent. It’s called the TAKE IT DOWN Act, and as of 2026 it’s an active legal obligation for a wide range of online platforms, with enforcement now underway.
What the law actually does
The TAKE IT DOWN Act was signed into federal law in May 2025 and creates two things at once: a federal criminal offense for knowingly publishing or threatening to publish non-consensual intimate imagery (including “digital forgeries” — deepfakes — created or altered using software or AI), and a mandatory notice-and-removal system that covered platforms must operate. The criminal provisions carry penalties of up to two years for adults depicted and up to three years when the imagery involves a minor, with lighter sentences for threats to publish rather than actual publication. That criminal piece sits alongside, and is separate from, the platform-facing compliance requirement that’s more directly relevant to how creator platforms operate day to day.
Which platforms are covered
The law applies broadly to websites, apps, and online services that host user-generated content or are primarily designed to publish this kind of material — social media, messaging apps, image and video sharing sites, and gaming platforms with user content all fall inside the definition. It specifically excludes broadband and email providers, and services that only host curated, non-user-generated content. Creator subscription platforms, where a substantial share of the content is uploaded by users (creators) for other users to view, sit squarely within scope.
The 48-hour removal requirement
Once a platform receives a valid removal request, it has 48 hours to investigate and take the content down — a much tighter window than the general “prompt” standard that governs DMCA copyright claims. A valid request requires an electronic signature from the person depicted (or their representative), a good-faith statement that the content is non-consensual, and enough information to identify the specific content and let the platform respond. Platforms have to make this process easy to find — plain-language instructions posted prominently, reachable from wherever this kind of content might appear, including posts, comments, direct messages, and livestreams — and available to people submitting a request whether or not they hold an account on the platform.
The obligation doesn’t stop at removing the one flagged copy. Platforms are also expected to make reasonable efforts to find and remove known identical copies already circulating on the same service, generally using hash-matching technology, and many platforms coordinate with third-party hash-sharing databases — NCMEC’s system for imagery involving minors, and StopNCII.org for adults — to catch reposts of content already reported elsewhere.
Enforcement started in 2026
Platforms had until May 19, 2026 to have compliant notice-and-removal processes in place, and the FTC confirmed it began actively enforcing the law after that date. Violations can draw FTC enforcement action and civil penalties running into the tens of thousands of dollars per violation, on top of the separate criminal exposure for whoever actually posted the material. For a platform’s compliance team, that combination — a hard 48-hour clock, a broad definition of “covered platform,” and live federal enforcement — makes this a materially different obligation than the copyright-based takedown processes most platforms already had running.
How this differs from a DMCA takedown
The two systems solve different problems and shouldn’t be treated as interchangeable. A DMCA notice is about copyright ownership — a creator asserting that content they hold rights to was reposted without authorization, regardless of what the content depicts. A TAKE IT DOWN request is about consent — the person depicted in an image or video asserting they never agreed to its distribution, which applies whether or not the person filing the request holds any copyright in the material at all, and applies to AI-generated forgeries where no “original” ever existed. A platform that only built infrastructure for copyright claims has to separately account for consent-based claims that move on a faster statutory clock. Platforms that already run a mature DMCA process have a head start on the operational parts — intake forms, identity verification, a tracking system for each request — but the legal standard being evaluated is different and the timeline is considerably tighter.
Why this matters for evaluating any creator platform
This is worth understanding as a distinct compliance layer from the two other legal changes we’ve covered on this blog: it’s not the same as the state and federal visitor age-verification laws that govern who can access a site in the first place, and it’s not the same as the copyright-based DMCA process creators already use to get their own leaked content taken down. It’s a third, newer obligation specifically about non-consensual content, and a platform’s readiness for it — a visible reporting process, a fast response time, real hash-matching against reposts — is a legitimate thing to ask about before choosing where to build a presence, alongside fees and payout terms. It’s also one of several compliance changes reshaping this category at once in 2025–2026 — see our related look at how card-network rules and high-risk payment processors shape which platforms can even accept payments.
IsleFans launches September 15, 2026, into a regulatory environment where this requirement is already active federal law, not a future consideration. See the full platform comparison table for what’s confirmed about IsleFans’ policies today.