Enforcement starts today.
The Federal Trade Commission began enforcing Section 3 of the Take It Down Act on May 19, 2026. Covered platforms, social media services, user-generated content apps, and websites hosting content submitted by third parties, now face binding removal obligations when a victim submits a valid takedown request for non-consensual intimate imagery (NCII), including what the statute terms “digital forgeries”: AI-generated intimate imagery.
Three obligations are now active. First, the 48-hour removal window: once a platform receives a valid victim request, it must remove the reported content within 48 hours. Second, the copies standard: platforms must make “reasonable efforts” to identify and remove known identical copies of the reported content. That’s a statutory “reasonable efforts” standard, not strict liability. A platform doesn’t face automatic penalty for every copy it misses, but it must actively look. Third, the notice requirement: each covered platform must give users “clear and conspicuous” plain-language notice of the removal process, including users without accounts.
The penalty ceiling matters. Per the Federal Register’s annual inflation-adjusted civil penalty schedule, the FTC can seek up to $53,088 per violation. Each unresolved valid request is a separate violation. For a platform receiving high request volume, exposure compounds quickly.
The “digital forgeries” definition is the compliance team’s first precision task. The statute covers AI-generated intimate imagery, but the precise scope – whether it captures all synthetic NCII or specific categories, should be mapped against official FTC guidance rather than secondary characterization alone. Plan conservatively until the FTC publishes enforcement guidance.
Legal analysis from Reed Smith confirms the “clear and conspicuous” notice language tracks the statute directly. The notice must be accessible to people who haven’t created accounts, so burying the process in a logged-in help center doesn’t satisfy the requirement.
What to watch
The FTC’s first enforcement action under TIDA will define the agency’s interpretation of “reasonable efforts” for copies. That’s the provision with the most compliance ambiguity. Watch for: – First FTC complaint filed under Section 3, will establish what “reasonable efforts” looks like in practice – FTC guidance on the “digital forgeries” definitional scope – Whether the FTC pursues per-violation penalties or seeks injunctive relief first
The EU parallel
This isn’t an isolated development. The EU AI Act Omnibus agreement, reached May 7, 2026, reportedly adds an explicit prohibition on “nudifier” applications, AI tools generating non-consensual intimate imagery – with a December 2, 2026 enforcement date. The FTC’s TIDA enforcement (US) and the EU nudifier ban are now on simultaneous tracks. Compliance teams at platforms operating across jurisdictions are, for the first time, managing live NCII enforcement obligations on both sides of the Atlantic.
TJS synthesis
The real question isn’t whether platforms have a removal process, most do. It’s whether that process meets the 48-hour clock, whether notice is genuinely “clear and conspicuous” to non-account users, and whether anyone’s actively searching for identical copies. Those three gaps are where FTC scrutiny will likely land first. Platforms that treat this as a checkbox exercise face a different risk profile than those that’ve rebuilt their abuse workflows. The agencies writing the first complaints will set the precedent that every other compliance team is actually managing against.