FTC Begins Enforcing the TAKE IT DOWN Act: 48-Hour Removal Duty for Online Platforms

On May 19, 2026, the US Federal Trade Commission announced that it had begun enforcing the TAKE IT DOWN Act. The law requires covered online platforms to give people a way to ask for the removal of intimate photos or videos shared without their consent, and to remove that content within 48 hours of a valid request.

This is not only a matter for the largest social networks. Any product where users upload and share images or video deserves a second look, whether it is a community app, a messaging feature, a dating product or a marketplace website with user profiles and listings. The requirement is operational as much as legal: someone has to receive the request, find the content and take it down inside a fixed window.

Below is a summary of what the FTC has published, followed by what it means for a product owner. It is a high-level overview and not legal advice.

What the FTC announced on May 19, 2026

In its press release of May 19, 2026, the FTC said it enforces Section 3 of the TAKE IT DOWN Act, which set a May 19, 2026 deadline for covered platforms to provide a removal request process and to remove reported intimate images, and known identical copies, within 48 hours of a valid request. The FTC's business blog post of the same date notes that the Act was signed into law on May 19, 2025, so platforms had one year to prepare.

The same release announced TakeItDown.ftc.gov, a site where people can submit complaints about platforms that fail to act on valid removal requests or that have not created a request process at all. The release also says that FTC Chairman Andrew N. Ferguson had written to a number of large technology companies the week before to remind them of the deadline.

Who counts as a covered platform

The FTC's guidance page, Complying With the Take It Down Act, says the Act's definition of covered platform covers various websites, apps and online services, such as social media, messaging, image or video sharing, and gaming platforms. It adds that a business may fall under the Act if it primarily provides a forum for user-generated content, or if it regularly publishes, curates, hosts or furnishes intimate content shared without consent.

That description is broad, and the guidance is a summary rather than the statutory text. Whether a specific product is covered depends on the definition in the Act itself, including any exclusions, which is a question for your lawyer. The practical point for founders is that company size is not what the FTC's description turns on. A small app built around user uploads sits closer to that description than a large brochure website with no user content.

What a covered platform has to do

According to the FTC guidance, a covered platform must do three things.

• Publish plain-language information about its notice and removal process, including how to submit a request. The FTC says this notice must be clear and conspicuous.
• Remove the reported content within 48 hours of receiving a valid request.
• Make reasonable efforts to find and remove known identical copies of the reported photo or video within the same 48 hours.

The guidance also states that the Act covers both real intimate photos and videos and what it calls digital forgeries, meaning images created or altered using software, an app or artificial intelligence. A product that lets users generate or edit images is therefore not outside the conversation simply because the content is synthetic.

Practices the FTC recommends

Beyond the requirements, the FTC guidance recommends placing the notice on the home page and wherever intimate content might appear, letting people submit a request directly from the photo or video, accepting requests from people who do not have an account, giving each request an identifying number, and keeping requesters updated on status. It also suggests using hashing so that removed content does not reappear, and sharing hashes with the National Center for Missing and Exploited Children's Take It Down service for content involving minors and with StopNCII.org for adults. These are presented as recommendations, not as the legal minimum.

Penalties and early enforcement signals

The FTC guidance says that a failure to comply is treated as a violation of an FTC rule and that platforms may face civil penalties of USD 53,088 per violation.

The agency moved quickly. On May 20, 2026, one day after enforcement began, the FTC announced warning letters to a dozen websites offering so-called nudify tools. According to that release, the letters said the sites appeared to be violating the Act by failing to provide a process through which victims can request removal of nonconsensual intimate images. A warning letter is not a finding of liability, but it shows that the absence of a request process is, on its own, something the FTC is looking for.

What it means for your business

The 48-hour window is the part that changes how a product has to be built and run. In our view, three things follow from it.

First, an email address buried in the terms of service is unlikely to be a workable intake channel. A request needs to arrive in a queue that someone watches on weekends and public holidays, with enough structured information to locate the content quickly.

Second, removal has to be real. In many systems, deleting a post leaves the file in object storage, in a content delivery network cache, in resized thumbnails, in backups and in search indexes. A team should know every place an uploaded image ends up before it promises to remove one in two days.

Third, the identical-copies duty is a technical feature, not a policy statement. Finding known copies generally means computing a hash of each upload and being able to search by it, which is far easier to design in from the start than to add to years of stored media.

This is US federal law enforced by a US regulator. A UK company with US users should not assume it is out of scope, and should treat its obligations under UK law as a separate matter that this article does not cover.

What to do next

Start by deciding, with legal advice, whether your product is a covered platform. If users can upload, share or generate images or video, do not skip this step.

If you are covered or might be, map the path of a removal request from end to end: where it is submitted, who is alerted, how the content and its copies are found, what is deleted or disabled, and how the requester is told. Then test it with a dry run and time the result. A process that has never been exercised tends to fail on the first real request.

Finally, keep records. A reference number per request, timestamps for receipt and removal, and a note of what was removed give you something concrete to show if a complaint reaches the FTC. If you are planning a new product with user uploads, add the reporting flow, hashing and an admin moderation screen to the first release rather than a later one.

Conclusion

Since May 19, 2026, the FTC has been enforcing the TAKE IT DOWN Act's requirement that covered platforms offer a clear removal request process for nonconsensual intimate images and act on valid requests, including known identical copies, within 48 hours. The agency has published compliance guidance, opened a public complaint site and sent its first warning letters. For any product built on user-generated images or video, the sensible response is to confirm whether the Act applies and to make sure the removal process works under time pressure.

Entrant Technologies builds websites, web applications and mobile apps. If you need reporting, moderation or media removal features added to an existing product or planned into a new one, you can request a quote and describe what you have today.