On May 19, 2026, the Federal Trade Commission began actively enforcing the TAKE IT DOWN Act (TIDA), bringing to a close any informal grace period that covered platforms may have relied upon while developing internal compliance programs. With enforcement now underway, online platforms within the law's scope face immediate exposure if their intake, review, and takedown systems are not fully operational. The shift from anticipated to active enforcement should prompt every covered platform to revisit its compliance posture without delay.

At the heart of TIDA is a strict timing obligation. Covered platforms must remove non-consensual intimate images within 48 hours of receiving a valid request from a victim. Meeting that deadline consistently requires more than a written policy; it requires operational infrastructure. Platforms should ensure that they have a clearly published reporting channel, a defined process for verifying the legitimacy of incoming requests, trained personnel available to act around the clock, and escalation paths for ambiguous or high-volume situations. Equally important is the ability to demonstrate, through contemporaneous records, that each qualifying request was handled within the statutory window.

The consequences of falling short are significant. Noncompliance with TIDA exposes platforms to FTC enforcement action, including civil penalties of up to $53,088 per violation. Because violations can accumulate quickly across a user base, even isolated breakdowns in workflow can translate into substantial financial and reputational risk. The FTC's enforcement posture also signals that the agency expects platforms to treat TIDA obligations as core compliance functions rather than as ancillary trust-and-safety matters.

Covered platforms should take this moment to audit existing policies against the requirements of the Act, confirm that response times are being measured and documented, and provide refreshed training to staff who handle reports of non-consensual intimate imagery. Coordination among legal, trust-and-safety, engineering, and communications teams will be essential to ensure that the 48-hour clock is respected in practice, not merely in policy. Early investment in these processes is likely to reduce both regulatory and litigation exposure as the FTC's enforcement program matures.

This alert is provided for general informational purposes only and does not constitute legal advice. Clients should consult counsel for guidance tailored to their specific circumstances and operations.


Authors