Regulatory  ·  2026-05-16

FTC Begins Enforcement of Take It Down Act for Nonconsensual Deepfakes on May 19

RegulatoryHigh impactUnited States
The Federal Trade Commission announced enforcement details for the Take It Down Act, requiring websites and online services to remove nonconsensual intimate imagery and AI-generated deepfakes within 48 hours of victim notification starting May 19, 2026. The FTC set maximum civil penalties of $53,088 per violation and sent compliance letters to Amazon, Alphabet, Apple, Meta, Microsoft, TikTok, X, and other major platforms on May 15.
This is the first binding federal enforcement regime for AI-generated content moderation at scale, shifting platform liability from discretionary to mandatory. Platforms that host AI-generated intimate content—whether through user uploads or their own generative AI services like X's Grok—now face per-instance financial penalties and FTC investigation. The 48-hour window and per-violation penalty structure create strong incentives for over-removal, which civil society groups warn could be exploited for censorship of legal speech.
AI security teams at covered platforms should audit content moderation workflows for nonconsensual intimate imagery and deepfakes, verify that reporting mechanisms are accessible to non-account-holders, implement hashing technologies to prevent re-upload, and document compliance procedures before the May 19 enforcement date. Legal and policy teams should review whether existing AI content policies meet FTC plain-language and conspicuous-notice requirements.
Sources
CyberScoopFTC Letter to Stakeholders
See this in the live feed Explore related AI security and governance findings — updated every morning.
Open the feed →