The Federal Trade Commission told parents on October 6, 2026 that a platform which fails to take down an explicit image of a child within 48 hours can be reported to the agency. The reporting address is TakeItDown.ftc.gov, and the route rests on a federal law that became enforceable months earlier, not on a proposal still working through Congress.
The timetable matters because the reporting route means something only if the obligation has actually started. It has: the removal duty took effect on May 19, 2026, and the FTC announced that very day that it had begun enforcing it.
The Take It Down Act and its May 19, 2026 deadline
The statute is the TAKE IT DOWN Act, Public Law 119-12, approved on May 19, 2025, according to the enacted text on congress.gov. Section 3 gave covered platforms one year from enactment to build a process through which an identifiable person, or an authorized representative, can request removal of a nonconsensual intimate image. Once a valid request arrives, the platform must remove the depiction within 48 hours and make reasonable efforts to take down known identical copies.
One year from May 19, 2025 lands on May 19, 2026, and the agency treats that date as the start of the obligation. Its business guidance page states that Section 3 is effective May 19, 2026. As of October 13, 2026, that deadline passed nearly five months ago, so the question for platforms is no longer whether the duty exists but whether the process they built actually works.
Covered platforms are defined broadly. The FTC describes them as websites, apps and online services, including social media, messaging, image and video sharing, and gaming platforms, and says a business can be covered if it primarily provides a forum for user-generated content or regularly hosts intimate content shared without consent.
The FTC consumer alert of October 6 and the parents’ route to a report
The agency’s consumer alert, published by the Bureau of Consumer Protection on October 6 and modified October 7, lays out the sequence for a family whose child has been targeted, including by AI-generated images. First comes the person responsible: local police, the National Center for Missing and Exploited Children’s CyberTipline, or the FBI. Second, the family asks the platform itself to remove the image, usually through the report option attached to the post, or through the platform’s help center when no account exists.
The alert says the Act requires covered platforms to give parents an easy way to make that request. If the image is still up after 48 hours, the alert directs parents to report the platform to the FTC at TakeItDown.ftc.gov. A separate step, the nonprofit Take It Down service run by NCMEC, creates a digital fingerprint of the image so participating services can help stop it from reappearing elsewhere.
The reporting page is where the family’s complaint becomes useful to the agency. The FTC’s May 19 enforcement announcement says victims and survivors can use it to report platforms that fail to act on valid removal requests or fail to create a removal process at all.
FTC letters to fifteen companies and the enforcement record
Enforcement did not begin quietly. On May 11, 2026, FTC Chairman Andrew Ferguson sent letters to fifteen companies: Alphabet, Amazon, Apple, Automattic, Bumble, Discord, Match Group, Meta, Microsoft, Pinterest, Reddit, SmugMug, Snapchat, TikTok and X. The agency’s release on those letters quotes Ferguson saying that the agency stands ready to monitor compliance, investigate violations and enforce the law, and that protecting children from this abuse is a top priority.
When enforcement started on May 19, Ferguson framed the stakes around children. “In the age of AI, anyone can be targeted, and that becomes even more appalling if children are involved,” the chairman said in the FTC announcement. The letters, the guidance page and the reporting site together form the agency’s implementation record, and each is a current page on ftc.gov rather than a summary by a third party.
Enforcement limits and what a report can and cannot do
A report to the FTC is a complaint to a regulator, not a takedown order. The agency enforces the duty by treating a violation as a violation of an FTC rule, and the business guidance cites civil penalties of $53,088 per violation. Nothing on the reporting page promises that the agency will pursue any single complaint or compel removal of a particular image, which is why the alert puts police, NCMEC and the platform’s own request form first.
The statute also carries limits. A law-firm summary of the rules in the Inside Privacy analysis notes that the duties apply only to covered platforms, that email and broadband providers are excluded, and that a platform acting in good faith to remove material based on facts indicating a violation has a safe harbor. The 48 hours also run from a valid request, so the clock does not start until the platform has actually been asked. The criminal provisions of the Act are a separate matter handled by the Department of Justice.
This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.
More from Morning Overview
- The FBI told the rest of ShinyHunters to surrender after a 24-year-old was arrested
- Two passengers died at an Ohio toll plaza, and the NTSB now wants the cash lanes shut
- Long use of a common prostate pill is tied to a higher chance of glaucoma
- Ford is recalling 223,472 F-150 pickups because the fuel tank can leak or detach
