The Take It Down Act has its first conviction.
An Ohio man, identified in reporting as James Strahler II, entered a guilty plea in what prosecutors and coverage from KOMO News describe as the first criminal conviction in the nation under the 2025 federal statute. The Act criminalizes the non-consensual publication of intimate visual depictions, including AI-generated deepfakes. The conviction was secured April 7, 2026.
The case reportedly involved AI-generated images and multiple victims, though the specific figures cited in some coverage have not been independently confirmed at primary source level. The statute carries criminal penalties per offense; the exact sentencing exposure tiers, as reported by legal outlets, should be confirmed against the statute or the DOJ press release before relying on specific figures. What is confirmed at the highest source level: the FTC has clear enforcement authority under the Act, and the platform compliance deadline is statutory, not discretionary.
That deadline is May 19, 2026.
Covered platforms, social media providers and similar services within the Act’s scope – must have formal notice-and-removal procedures in place by that date. The requirement is specific: platforms must be able to process reports of non-consensual intimate visual depictions and act on them within 48 hours of a valid report. Failure to comply brings FTC enforcement exposure.
This matters beyond the criminal case itself. The conviction tells compliance professionals that the government intends to use the statute. The May 19 deadline tells platform legal teams that FTC scrutiny is roughly four weeks away. Those two facts together create a short planning window.
The Take It Down Act fits a pattern emerging across jurisdictions. Non-consensual intimate imagery generated by AI has moved from a technology ethics debate into active criminal and regulatory enforcement. In the same week this conviction was reported, EU negotiators were reportedly discussing a new Article 5 prohibition in the AI Act Omnibus that would target AI systems capable of generating such content, an approach that works at the model development level rather than the platform enforcement level. The US and EU are converging on the same category of harm from opposite ends of the regulatory spectrum.
What to watch: The May 19 deadline is the immediate action point. Platforms that have not yet drafted or finalized their notice-and-removal procedures are now in a four-week sprint. The FTC’s first enforcement action under the Act, whether against a platform for non-compliance or a subsequent criminal referral, will set the operational parameters for how aggressively the statute gets applied. Watch also for the sentencing outcome in the Strahler case, which will establish the practical penalty range under criminal prosecution.
The conviction is a signal, not just a data point. Regulators and prosecutors secured a guilty plea under a statute that was less than a year old at the time. That speed matters. It suggests the enforcement apparatus was built in parallel with the legislative process – not assembled after the fact. Platform compliance teams should treat May 19 as a hard deadline, not a soft target.