Platforms now have 48 hours to remove your intimate photos or risk a $53,088 fine

The Federal Trade Commission is now enforcing a federal law that gives platforms 48 hours to remove a nonconsensual intimate image once a valid request comes in, and platforms that fail to comply face civil penalties of up to $53,088 per violation. The agency laid out the deadline and the fine in a September 17 consumer alert explaining how people can report a platform that misses the window. The rule, part of the Take It Down Act, has applied to covered platforms since the FTC began enforcing it on May 19, 2026.

A federal law with a 48-hour clock

Under the Take It Down Act, a platform that hosts user-generated content must give people a clear way to request removal of an intimate image shared without consent, then take down that image — along with any known identical copies — within 48 hours of a valid request. The requirement reaches social media sites, messaging apps, image- and video-sharing services, and gaming platforms that primarily host user content, not just the handful of large networks most often named in privacy debates.

Covered platforms have more to do than just hit the 48-hour deadline, according to the FTC’s compliance guidance: the law requires them to assign an identifying number to each removal request, tell requesters whether the content was removed or explain why it was not, and consider hashing technology to keep the same image from being reposted once it is taken down. Platforms are also encouraged to share those hashes with the National Center for Missing and Exploited Children’s Take It Down service for minors, or with StopNCII.org for adults, the FTC’s compliance blog post says. A platform that meets the 48-hour window but skips the tracking-number and status-update requirements is still out of compliance under the agency’s own reading of the statute.

The $53,088 penalty behind it

The FTC’s September 17 consumer alert puts the maximum civil penalty at $53,088 per violation, a figure that applies whether a platform simply misses the 48-hour window, never built a removal process at all, or built one that does not actually work. The commission treats each of those three failure modes — a missed deadline, a missing process, or a broken one — as its own violation.

Enforcement began on May 19, 2026, the compliance deadline set when President Donald Trump signed the Take It Down Act into law the previous year. FTC Chairman Andrew Ferguson framed the rollout around the law’s origins, crediting First Lady Melania Trump’s advocacy: “Thanks to First Lady Melania Trump’s dedication, the public, especially children, will have recourse against digital exploitation and extortion,” Ferguson said in the commission’s enforcement announcement.

The law passed with rare bipartisan margins in 2025 before that May enforcement date arrived.

Digital forgeries count as intimate images too

The law’s definition of an intimate image is not limited to real photographs. It also covers “digital forgeries” — content created or altered with software, apps, or artificial intelligence — including AI-generated deepfakes that depict someone in an intimate scenario they never appeared in. Ferguson pointed to that expanded scope directly: “In the age of AI, anyone can be targeted, and that becomes even more appalling if children are involved,” he said.

That inclusion matters because the 48-hour clock and the $53,088 penalty apply the same way to a fabricated deepfake as to an authentic photo, so a platform cannot treat an AI-generated image as outside the law’s reach. The FTC’s May alert on the rule, published as enforcement began, described the removal obligation as running to “known identical copies” of the flagged content as well as the original file.

Filing a report against a platform

People who believe a platform ignored a valid takedown request, never offered a removal process, or ran a broken one can file a report at TakeItDown.ftc.gov, the portal the commission built specifically to collect those complaints about platform conduct, distinct from the separate image-hashing tools platforms use to actually block reposts. The FTC has said those reports feed directly into its investigations of noncompliant platforms rather than sitting in a general complaint queue, and it has encouraged both account holders and people who never had an account on a given platform to use the same reporting channel.

Since May, the commission has framed the law as an active monitoring effort rather than a one-time compliance check, with the September alert serving as a reminder nearly four months into enforcement that the 48-hour deadline and the $53,088 exposure remain in force. Whether any platform has already been assessed a penalty under the law had not been disclosed by the FTC as of the September alert. That absence of a named penalty, four months into enforcement, leaves the $53,088 figure as a ceiling the FTC has advertised without yet, publicly, collecting it from a named platform.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview