UK Mandates 48-Hour Takedown of Nonconsensual Intimate Images
The UK government announced an amendment to the Crime and Policing Bill that would require online platforms to remove nonconsensual intimate images within 48 hours of being flagged, with penalties for noncompliance including fines of up to 10% of qualifying worldwide income and potential service blocking in the UK. The proposal would also make creating or sharing such material a “priority offence” under the Online Safety Act, elevating it to a level of enforcement comparable to child sexual abuse material and terrorism content.
The policy is intended to reduce the burden on victims by enabling a single report to trigger takedowns across multiple platforms and to prevent re-uploads via digital marking (hashing/fingerprinting) so reposted content can be automatically detected and removed. The announcement follows public backlash over xAI’s Grok chatbot generating “nudified” sexualized images, and comes amid increased scrutiny by Ofcom, with the government also indicating it will publish guidance for internet providers on blocking access to sites hosting this content, including “rogue” sites potentially outside the Online Safety Act’s direct reach.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
10 events from the most recent confirmed update back to the earliest known activity.
Ofcom targets May decision and possible summer rollout
Ofcom said it expects to decide in May whether to require proactive technology to block illegal intimate images at source, with implementation potentially beginning in the summer subject to parliamentary approval.
UK proposes jail terms for tech bosses over intimate-image takedown failures
On 2026-04-10, the UK government announced a proposed amendment to a crime bill that would allow imprisonment of technology executives whose platforms fail to remove non-consensual intimate images following Ofcom enforcement decisions. The measure escalates the government's earlier approach of fines, service blocking, and 48-hour takedown requirements.
UK warns of fines and possible ISP blocking for noncompliant services
The government said platforms that fail to comply could face fines of up to 10% of qualifying worldwide revenue, and it plans guidance for internet providers on blocking access to sites hosting such content when they fall outside the Online Safety Act's reach.
UK plans priority-offense status and cross-platform removal model
Alongside the takedown deadline, the government said creating or sharing non-consensual intimate images would become a priority offense under the Online Safety Act, with a 'report once, removed everywhere' approach and automatic re-removal of reposts using digital markings or hash matching.
UK government announces 48-hour takedown rule for intimate images
On February 19, 2026, the UK government announced it would amend the Crime and Policing Bill to require online platforms to remove non-consensual intimate images within 48 hours of a report or face major penalties.
EU investigates X under the Digital Services Act over Grok imagery
EU regulators began a Digital Services Act probe into X related to Grok's production of explicit imagery, including images involving children.
Ofcom opens probe and accelerates decision on hash-matching rules
Ofcom opened a probe linked to the Grok controversy and brought forward its decision on whether platforms should use proactive hash-matching technology to detect and prevent reuploads of illegal intimate images, moving the decision timeline to May.
Elon Musk says Grok will block creation of such imagery
Following the backlash over Grok-generated explicit imagery, Elon Musk said the chatbot would block the creation of that kind of content.
Public backlash erupts over Grok generating fake nude images
Public controversy grew after xAI's Grok chatbot was reported to generate nude or sexualized images, including 'nudified' content, helping drive political and regulatory pressure for stronger controls.
Georgia Harrison wins civil revenge porn case in the UK
A UK civil case brought by Georgia Harrison over non-consensual intimate imagery concluded in 2022, later cited by advocates as a benchmark in the debate over stronger platform takedown rules.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
5 references tracked. Mallory keeps watching after this page renders.
UK government threatens tech bosses with jail time if they do not adequately fight nudification tools | The Record from Recorded Future News
therecord.media
Open sourceUK to force social media to remove abusive pics in 48 hours • The Register
go.theregister.com
Open sourceUK to require tech firms to remove nonconsensual intimate images within 48 hours or face fines | The Record from Recorded Future News
therecord.media
Open sourceUK Close to Imposing Hash Matching for Revenge Porn
govinfosecurity.com
Open sourceUK Close to Imposing Hash Matching for Revenge Porn
bankinfosecurity.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Global privacy regulators warn generative AI firms over nonconsensual realistic images
A coalition of **more than 60 data protection authorities from 61 countries** issued a joint warning to developers and deployers of generative AI image/video systems, emphasizing that **privacy and data protection laws apply** when tools can create realistic depictions of identifiable people. Regulators cited risks including **nonconsensual intimate imagery**, **defamatory depictions**, cyberbullying, and heightened harms to **children and other vulnerable groups**, and called for **robust safeguards by design** and proactive engagement with regulators. The warning followed public backlash and regulatory scrutiny tied to **xAI’s Grok** generating and sharing large volumes of “nudified” images of real people; reporting also noted that the **UK ICO** and **Ireland’s DPC** opened formal probes into xAI over alleged creation of sexual images without consent. Separately, the UK government signaled tougher enforcement on platforms hosting intimate images shared without consent, including a requirement to remove such content within **48 hours** or face significant penalties, reinforcing the broader regulatory direction toward faster takedowns and stronger controls around AI-enabled image abuse.
Mar 21, 2026
FTC Enforces 48-Hour Takedown Rule for Nonconsensual Deepfakes
The Federal Trade Commission said it will begin enforcing a key provision of the Take It Down Act on May 19, requiring covered websites and online services to remove reported nonconsensual intimate imagery and AI-generated deepfake content within 48 hours. FTC Chair Andrew Ferguson notified major platforms including Meta, Google, and X that failures to comply can trigger investigations and civil penalties of up to **$53,088 per violation**, and said companies must publish clear removal policies and provide accessible reporting channels, including for people who do not have accounts. The requirement applies broadly across websites, apps, social media, image and video sharing services, and gaming platforms. The FTC also urged companies to use hashing technologies and coordinate with groups such as the **National Center for Missing and Exploited Children** and **StopNCII.org** to prevent removed material from being reuploaded. Supporters said the enforcement regime gives the law real consequences for noncompliance, while civil liberties and policy experts warned the short deadline and steep fines could lead platforms to over-remove legitimate content or create openings for bad-faith complaints.
May 27, 2026
EU Moves to Curb AI-Generated Sexual Abuse and Deepfake Harms
European policymakers advanced new measures aimed at limiting **AI-enabled sexual abuse and impersonation harms**, with the **European Council** proposing amendments to the AI Act that would ban AI systems used to generate non-consensual intimate imagery, including **nudification tools** and child sexual abuse material. The proposal also tightens standards for processing sensitive personal data, and follows parallel action in the **European Parliament**, increasing the likelihood that a negotiated EU position will include explicit restrictions on these abusive AI uses. The push comes amid broader concern over the real-world impact of generative AI, including the recent backlash over AI-generated intimate imagery. Separately, **YouTube** expanded access to its AI-driven likeness detection system for **government officials, journalists, and political candidates**, allowing eligible users to identify AI-generated impersonation videos and request removal when content violates platform privacy rules. The system is designed to detect synthetic uses of a person’s likeness while preserving exceptions for parody, satire, and other public-interest expression. Other cited items were not part of the same event: one covered the EU’s extension of voluntary **CSAM** detection rules under the ePrivacy framework, and another reported research showing major chatbots sometimes provided violent guidance to would-be attackers.
Mar 30, 2026