What Section 230 means for Americans whose photos are reposted

What to take away

• Creator rights and image consent online start with one fact: Section 230 protects the platform, not the person who reposted your photo.
• Section 230(c)(1) shields a platform from being treated as the publisher of user content; (c)(2) protects good-faith moderation.
• The FOSTA-SESTA carve-out removed federal sex trafficking claims from immunity, and the statute also excepts federal criminal law and intellectual property claims.
• Notice to a platform does not strip immunity for a defamation or privacy repost; only the listed exceptions do.
• Your practical claims are usually a DMCA takedown for the copy and a state right of publicity or privacy claim against the reposter.
• Document the original, the repost and your complaint before you send anything, because the record is your strongest asset.

Section 230 in the statute's own words: what immunity actually covers

Section 230 lives in Title 47 of the U.S. Code. The full text is short and worth reading before you argue about it: 47 U.S. Code § 230 - Protection for private blocking and screening of offensive material | U.S. Code | US Law | LII / Legal Information Institute.

Subsection (c)(1) says no provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider. That single sentence is the immunity. It applies to state law claims and to most civil claims, and courts read it broadly.

Subsection (c)(2) is different. It protects a provider or user from liability for voluntary good-faith action to restrict access to material the provider or user considers objectionable. The listed categories include obscene, lewd, lascivious and filthy material. Excessively violent and harassing material counts too. The protection applies whether or not the material is constitutionally protected.

So (c)(1) is the shield for carrying your photo. (c)(2) is the shield for taking it down, or for leaving it up under a moderation policy. Both matter to a creator whose image is reposted, because a platform can hide behind either one depending on what it did.

The definitions matter too. Any information service, system, or access software provider that offers or allows multiple users to access a computer server is an interactive computer service. A platform, a forum, a comment section and a social app all fit.

An information content provider is anyone responsible, in whole or in part, for the creation or development of information. That second definition is where cases are won and lost.

The U.S. Code index is the place to confirm a citation before you quote it in a demand letter: U.S. Code: Table Of Contents | U.S. Code | US Law | LII / Legal Information Institute.

Why a reposted photo is usually the user's speech, not the platform's

When someone reposts your photo, the reposter is the information content provider for that post. The platform is the interactive computer service. Under (c)(1), the platform is not the publisher of the repost, even if it hosts it, indexes it, recommends it or profits from ads next to it.

Courts have applied this to hosting, to sorting, to recommending and to refusing to remove. The theory is that any decision to publish, withdraw, postpone or alter content is a publisher's decision, and (c)(1) blocks liability for it. Notice does not change the analysis for ordinary civil claims.

That is why a demand letter aimed at the platform usually fails and a demand letter aimed at the reposter sometimes works. The reposter made the post; the reposter can be sued for defamation, privacy invasion, right of publicity or copyright infringement, subject to the usual defenses.

The line between user and platform blurs when the platform develops the content. If a site writes the caption, edits the image, or curates a repost into a campaign, it may cross into information content provider territory and lose (c)(1) for that material.

Not every reuse is a repost. An embed, a screenshot and an off-platform download each raise different questions. The comparison in original upload, repost, share tool sets out how they differ.

The FOSTA-SESTA carve-out and what it removed from immunity

FOSTA-SESTA, the Allow States and Victims to Fight Online Sex Trafficking Act and the Stop Enabling Sex Traffickers Act, became law in 2018. It amended Section 230 by adding subsection (e)(5).

That subsection says nothing in this section shall be construed to impair or limit any claim in a civil action brought under section 1595 of title 18. The claim must rest on conduct that violates section 1591 of that title.

In plain terms, a platform can now be sued under the federal sex trafficking civil remedy if the conduct violates the federal sex trafficking statute. That claim is no longer barred by (c)(1). The carve-out is narrow. It does not cover ordinary reposts of your photo, revenge porn as such, or a stolen selfie.

FOSTA-SESTA also added a federal criminal charge for owning, managing or operating a platform with the intent to promote or facilitate prostitution, and it created a new section 2421A. That provision targets operators, not users, and it has been used against website owners.

For a creator whose image is reposted, the carve-out matters in one specific way: if the repost is part of sex trafficking conduct, the platform's immunity is gone for that claim. Otherwise, the carve-out does not help you. Do not cite FOSTA-SESTA in a routine repost dispute unless the facts actually fit.

The Congressional record on these platform debates is collected by the Copyright Office: Congressional Hearings and Statements to Congress | U.S. Copyright Office.

When platform immunity can be lost: federal criminal law and intellectual property claims

Section 230(e) lists the exceptions. Subsection (e)(1) says nothing in this section shall be construed to impair the enforcement of section 223 or 231 of this title, chapter 71 of title 18, or any other Federal criminal statute. That is the Federal criminal law exception.

Notice that it is limited to federal criminal law; state criminal law is not excepted.

Subsection (e)(2) says nothing in this section shall be construed to limit or expand any law pertaining to intellectual property. That is the Intellectual property claim exception.

It means a copyright or trademark claim is not barred by Section 230, though the platform may still have its own defenses under copyright law, including the DMCA safe harbor in section 512.

The two exceptions are often confused. The federal criminal exception lets federal prosecutors charge a platform; it does not give you a private civil claim for a repost. The intellectual property exception removes Section 230 as a defense to a copyright claim, so a DMCA takedown and a copyright suit remain available against the reposter.

State criminal law is not excepted, so a state obscenity or harassment prosecution against a platform for user content faces the (c)(1) bar. State civil claims are barred too, unless another exception applies.

That is why a state right of publicity claim against a platform for a repost usually fails while the same claim against the reposter can proceed.

An exception only helps if you can prove the facts behind it. The platform image rights checklist covers ownership, consent and the rest of the record you need to assemble.

The Wex legal dictionary is a usable reference for consent, publicity and related terms: Wex | Wex | US Law | LII / Legal Information Institute.

Notice, moderation and the difference between removing and being liable

Creators often believe that a platform becomes liable once it is notified and does not remove. For most civil claims, that is wrong. Notice does not convert a platform into the publisher of a repost, and (c)(1) still applies. The platform can leave the image up and keep its immunity.

What notice does is trigger the platform's own policies and, for copyright, the DMCA process. A proper DMCA notice under 17 U.S.C. 512 requires the platform to act expeditiously to remove or disable access to the material.

The DMCA safe harbor is a separate protection from Section 230, and it has its own conditions, including a designated agent registered with the Copyright Office.

(c)(2) protects removal. If a platform takes your photo down in good faith because it considers the material harassing or otherwise objectionable, it is protected from a claim by the reposter. So removal is low risk for the platform, and that is why many platforms remove images on request even when they are not legally required to.

Moderation choices can still matter at the edges. A platform that edits a repost, adds its own caption, or reposts the image itself may be developing the content. A platform that promises in its terms to remove non-consensual images and then does nothing may face a contract claim, which is a different theory from Section 230.

The platform image rights guide covers licenses, moderation and deletion in more detail: platform image rights guide.

What Section 230 does not do for the person who reposted your image

Section 230 does not protect the reposter from your copyright claim. The reposter is not an interactive computer service for their own post; they are the information content provider. If they copied your photo without a license, they are exposed under the Copyright Act, subject to fair use and other defenses.

Section 230 does not protect the reposter from a state right of publicity claim where the use is commercial. California Civil Code Section 3344 gives a person a claim for the unauthorized use of their name, voice, signature, photograph or likeness on or in products, merchandise or goods, or for advertising or selling.

New York, Texas, Florida, Illinois, Georgia and Nevada have comparable rights, with different scope and post-mortem terms.

Section 230 does not protect the reposter from privacy claims, including intrusion and public disclosure of private facts, where the elements are met. It does not protect them from a contract claim if they took the image from a platform whose terms they accepted. And it does not protect them from federal criminal law if their conduct violates it.

Section 230 removes the platform as a defendant for the repost. That is a real loss for a creator, because platforms are easier to find and easier to sue. So your claim must target the reposter, and your strongest tool is often the takedown rather than damages.

The comparison in child image consent compared sets out each theory of recovery.

Pairing a Section 230 reality check with a DMCA or right of publicity claim

A Section 230 reality check tells you what not to do: do not sue the platform for defamation or privacy over a user repost, and do not expect notice alone to create liability. Then pair that with the claims that survive.

Here is a worked example. A photographer in Austin finds her portrait reposted on a forum without credit. The forum is an interactive computer service, so (c)(1) bars her privacy claim against it.

The reposter is the information content provider, so a copyright claim against the reposter is not barred by Section 230. The intellectual property exception in (e)(2) also removes the platform's Section 230 defense to a copyright claim.

She files a DMCA notice with the forum's registered agent, sends a licensing demand to the reposter, and keeps a right of publicity claim in reserve if the repost is used to sell something.

Numbered steps for a US creator:

1. Preserve the original file, its metadata and the first public post.
2. Capture the repost with URL, timestamp and account details.
3. Check the platform's terms and DMCA agent registration.
4. Send a DMCA notice for the copy if you own the copyright.
5. Send a separate demand to the reposter for license, credit or removal.
6. Consider a state right of publicity claim only if the use is commercial.
7. Report non-consensual intimate images through the platform and NCMEC where a minor is involved.

A checklist before you complain:

• Original file and creation date saved.
• First publication URL and date saved.
• Repost URL, account and timestamp saved.
• Screenshots with full page context.
• Any license or permission you gave, in writing.
• Platform terms and DMCA agent details noted.
• Jurisdiction and state law claims identified.

Creator rights and image consent online: what to document before you complain

Consent is the hinge. If you gave permission, the repost may be licensed, and your claim shrinks to the scope of that permission. If you did not, the reposter has to justify the use. Written licenses, DMs and platform settings all become evidence, so keep them.

The documentation list is short. Your original file, your first post, the repost, your complaint and the platform's response. Add your registration certificate if you registered the work with the Copyright Office, and your DMCA agent records if you run a platform.

Small platform operators should register a DMCA agent and post clear consent rules, because the safe harbor and Section 230 are different protections with different conditions.

State law can add tools. The Illinois Biometric Information Privacy Act covers biometric identifiers, and the Washington My Health My Data Act covers health data, both with private rights of action that do not depend on Section 230.

Attorneys general coordinate on image-based abuse through the National Association of Attorneys General working group, and the FTC Endorsement Guides and .com Disclosures govern how sponsored reposts must be disclosed.

Legislative proposals to amend Section 230 and to address image consent continue to move: Legislative Developments | U.S. Copyright Office. The platform image reuse problems of assumed permission, stripped credit and incomplete deletion are covered in platform image reuse problems.

A final documentation checklist:

• Consent records, including scope and duration.
• License terms and any revocation.
• Registration and DMCA agent records.
• State law claims mapped to the facts.
• Reporting route for non-consensual images.

Common questions

Does Section 230 protect the person who reposted my photo? Usually no. Section 230 protects providers and users of interactive computer services from being treated as the publisher of another person's content. The reposter is the information content provider for their own post and can face copyright, publicity or privacy claims.

Does telling a platform about a repost remove its immunity? For most civil claims, no. Notice does not make the platform the publisher of the repost, and (c)(1) still applies. Notice does trigger the platform's policies and, for copyright, the DMCA process.

What did FOSTA-SESTA change? It added subsection (e)(5), which allows civil claims under 18 U.S.C. 1595 for conduct violating 18 U.S.C. 1591, and it created a federal criminal charge for operating a platform with intent to promote or facilitate prostitution. The carve-out is narrow.

Can I sue a platform for copyright infringement over a repost? Section 230 does not bar a copyright claim because of the intellectual property exception in (e)(2). The platform may still rely on the DMCA safe harbor in 17 U.S.C. 512 if it meets the conditions, including a registered agent.

Which state law claims survive against a reposter? Right of publicity claims, such as California Civil Code Section 3344, and privacy claims can proceed against the reposter where the elements are met. They usually fail against the platform because of (c)(1).

Where do I report a non-consensual image? Report it to the platform first, then to NCMEC if a minor is involved. State attorneys general coordinate through the National Association of Attorneys General image-based abuse working group. Keep records of every report.