The Take It Down Act: What the New Federal Deepfake Law Means for You — and What Happens Next

In April 2026, an Ohio man became the first person convicted under a federal law specifically designed to target AI-generated deepfake pornography. He used 24 different AI platforms to create more than 700 deepfake images of local adults and children, then posted them on a website promoting child sexual abuse [4]. The case marked a turning point: what started as a legislative response to a high school harassment incident in Texas had become actual enforcement muscle, with real consequences for real offenders.

That law is the TAKE IT DOWN Act (Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act), now Public Law 119-12 [1]. President Donald Trump signed it on May 19, 2025, with First Lady Melania Trump also putting her name on the bill as part of her "Be Best" anti-cyberbullying advocacy [2]. After clearing the Senate unanimously and passing the House 409-2 [1], it had the kind of bipartisan support that rarely survives contact with complicated technology policy.

So what does this law actually do, who does it protect, and how are victims supposed to use it?

What the Law Requires

The TAKE IT DOWN Act targets non-consensual intimate imagery (NCII) and deepfakes posted to online platforms [1]. Its core mechanism is a notice-and-takedown system: platforms that host this content must remove it within 48 hours after receiving a valid complaint [6]. The enforcement job falls to the Federal Trade Commission, which can go after platforms that fail to comply [1].

On the criminal side, the law carries real teeth. Publishing non-consensual intimate imagery of adults carries up to 2 years imprisonment. The penalty climbs to 3 years when the victim is a minor [1]. That escalation reflects how Congress categorized deepfake content involving children, separate and more serious than adult cases.

Platforms had one year from the law's passage to build out their takedown systems. That deadline hit on May 19, 2026 [1].

Who It Protects

The numbers behind this law are sobering. Between 96 and 98 percent of all deepfake content online is non-consensual intimate imagery [7]. Almost all of it targets women: 99 to 100 percent of NCII deepfake victims are female [7]. These are not abstract statistics. They represent real people whose faces, bodies, and dignity have been weaponized without their consent.

The scale of the problem has exploded in recent years. Deepfake incidents increased 571 times from 2019 to 2025 [7]. Verified deepfake incidents hit 179 in just the first quarter of 2025 [7]. All told, roughly 8 million deepfake files were in circulation as of 2025 [7]. That volume is why Congress moved, and why the FTC's enforcement role matters.

For victims, the practical benefit is a clear legal pathway. Before this law, many platforms dragged their feet on takedown requests, citing free speech concerns or technical complexity. The TAKE IT DOWN Act removes that excuse by creating a federal mandate with a specific timeline.

How Victims Can Use It

If you are a victim of deepfake NCII, the law gives you a direct tool. You file a complaint directly with the platform hosting the content. The platform must act within 48 hours. If they do not, the FTC can step in with enforcement action [6].

The law also criminalizes the creation and distribution of this content, giving state and federal prosecutors a clearer charging mechanism. The Ohio conviction shows this works: prosecutors used the new law to put someone away for weaponizing AI against real people in his community [4].

Senator Cory Booker, who initially blocked the bill before working with Senator Ted Cruz on amendments, said the changes clarified exactly which websites faced takedown requirements [1]. That clarification matters because it reduces the risk of victims getting bounced between platforms and authorities with no one accepting responsibility.

The Critics' Concerns

Not everyone is convinced the TAKE IT DOWN Act is the right fix. A coalition including the Center for Democracy & Technology, Authors Guild, EFF, Fight for the Future, Freedom of the Press Foundation, and TechFreedom raised concerns about the law's scope [1].

Their main objection is vagueness. Critics worry the law's language could sweep in legitimate content, with no clear exemption for things like artistic photography, satire, or journalism [1]. A law meant to protect victims could also be weaponized to silence critics or target protected speech.

Those concerns have not stopped the law from being used. The first conviction under the statute came less than a year after passage, suggesting prosecutors are willing to apply it even as some advocacy groups remain skeptical [4].

What Happens Next

The FTC now has the job of figuring out how aggressively to enforce this law against major platforms. The 48-hour takedown clock only works if victims know the system exists and can actually file complaints. That means outreach, education, and probably some early test cases that will set precedents for everything that follows.

The NCMEC CyberTipline received more than 7,000 reports of AI-created child sexual abuse material [3]. That number will likely grow as more people learn how to use the law's tools and as AI image generation becomes even more accessible.

For victims, the TAKE IT DOWN Act is not a perfect solution. It does not erase the harm of having intimate images circulated. It does not guarantee recovery from trauma. But it does give them something concrete: a federal right to demand removal, a criminal statute to punish distributors, and an enforcement agency with the power to act.

That is a starting point. Whether it becomes enough depends on how aggressively the FTC uses the authority Congress gave it.