Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act
United States · Law · United States Congress
Our summary
This law requires online platforms to remove non-consensual intimate images and deepfakes from their services. It establishes obligations for platforms to take down such content and addresses related enforcement mechanisms. The act was approved on May 19, 2025.
Written by the Index in our own words. It is not legal advice; the official text is the authority.
Inside this policy
Every section of this policy in order. Our notes summarise each one in plain language and do not quote the official text, which is the authority.
Drafted by the Index An automated summary of the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
5 sections
Jump to a chapter
Section 1 Short title
This Act may be referred to as the Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act or the TAKE IT DOWN Act.
Section 2 Criminal prohibition on intentional disclosure of
Criminal penalties apply for knowingly publishing intimate visual depictions or digital forgeries of identifiable individuals through interactive computer services without consent, with offenses defined differently for adults (unlawful if obtained without reasonable expectation of privacy and causing harm) and minors (unlawful if intended to abuse, humiliate, harass, degrade, or arouse sexual desire), subject to exceptions for lawfully authorized law enforcement or intelligence activities, good faith disclosures to law enforcement or in legal proceedings, medical or educational purposes, reporting unlawful content or harassment, seeking support for unsolicited depictions, self-published content by the person depicted, and child pornography or obscene representations of child sexual abuse. Penalties are up to 2 years imprisonment for violations involving non-minor adults and up to 3 years for violations involving minors, with threats carrying the same penalties except threats involving digital forgeries of minors carry up to 30 months imprisonment. Courts must order forfeiture of distributed materials and property derived from gross proceeds or used to facilitate violations, and must order restitution following federal procedures.
Section 3 Notice and removal of nonconsensual intimate visual
Covered platforms must establish a process within one year allowing individuals to notify them about nonconsensual intimate visual depictions and request removal, with notifications including the individual's signature, locating information, a good faith statement of non-consent, and contact details, and platforms must clearly display this process on their site. Failure to comply is an unfair or deceptive practice under the Federal Trade Commission Act, enforced by the FTC using the same manner, means, jurisdiction, powers and duties with full application of FTC penalties and privileges.
Section 4 Definitions
Section 5 Severability
If any portion of this Act or its amendments is found unenforceable or invalid, the remaining provisions remain in effect.
Controls
What this policy requires, forbids, grants or penalises, one control at a time and in our own words. Each control links to the official text, which is the authority. This is not legal advice.
Drafted by the Index Drafted automatically from the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
Themes covered 0 of 35
Choose a theme to see only its controls. About the themes
Risk and scope 0 of 4
- Risk classification, not covered
- Prohibited practices, not covered
- Risk management system, not covered
- Impact assessment, not covered
Data and privacy 0 of 4
- Data governance and quality, not covered
- Data subject rights and consent, not covered
- Cross-border data transfer, not covered
- Copyright and training data, not covered
Transparency and records 0 of 4
- Transparency and disclosure to users, not covered
- Labelling of synthetic content, not covered
- Technical documentation, not covered
- Record keeping and logging, not covered
Technical safeguards 0 of 4
- Human oversight, not covered
- Accuracy, robustness and cybersecurity, not covered
- Bias and non-discrimination, not covered
- Testing and evaluation, not covered
Assurance and lifecycle 0 of 4
- Conformity assessment and certification, not covered
- Registration and notification, not covered
- Incident and breach reporting, not covered
- Post-market monitoring and corrective action, not covered
Rights and protected groups 0 of 4
- Automated decision-making rights, not covered
- Children and vulnerable groups, not covered
- Biometric identification and surveillance, not covered
- Whistleblowing, complaints and redress, not covered
Roles and organisation 0 of 6
- Supply chain and provider-deployer duties, not covered
- General purpose and foundation models, not covered
- Accountability and governance roles, not covered
- Training and AI literacy, not covered
- Public sector use and procurement, not covered
- Innovation support and sandboxes, not covered
Enforcement and sectors 0 of 5
- Enforcement, penalties and regulators, not covered
- Sector rules: health, not covered
- Sector rules: finance and insurance, not covered
- Sector rules: employment, not covered
- Sector rules: education, not covered
The full list of controls could not be loaded, so only the first 0 are shown.
Change history
No changes recorded since we began monitoring this policy.