# Fix legal notices: publish the six notices and a way to send each request

> The legal-notices check asks whether a visitor, or an agent acting for one, can find how to make the requests the law says you must accept. It reads your policy pages for six notices and, for each, a way to actually send the request.

Checked 2026-09-30 against Agent-Readiness Grade 1.3.0. HTML version: https://grade.agentexchange.work/fix/legal-notices

## What the grade checks

- The grade calls the free [Compliance Desk check](https://takeitdown.agentexchange.work/check), which fetches your home page and `/privacy`, `/privacy-policy`, `/terms`, `/legal`, `/accessibility`, `/dmca`, `/copyright`, `/report`, `/safety`, `/contact` and `/about` (7-second timeout each; a page counts when it answers below 400 with some text).
- For each of six topics it looks for a notice (1 point) and a request mechanism (1 point), 12 points in all: TAKE IT DOWN Act removal notice, DMCA or copyright agent, DSA notice-and-action, privacy request method, accessibility statement with a feedback channel, and marketing opt-out.
- This area scores **2/2** at 6 or more desk points, **1/2** at 2 or more, **0/2** below that. It is a text search for notices and mechanisms, not a legal opinion.

2 of the 12 points.

## Why it matters for AI agents and crawlers

TAKE IT DOWN Act: the [FTC](https://www.ftc.gov/business-guidance/resources/complying-take-it-down-act) enforces Section 3 from May 19, 2026. Covered platforms must give clear and conspicuous, plain-language information on how to request removal of intimate images shared without consent, and remove valid reports and known identical copies within 48 hours.

DMCA: the [section 512 safe harbor](https://www.law.cornell.edu/uscode/text/17/512) depends on a designated agent registered with the U.S. Copyright Office and named on your site.

EU Digital Services Act: [Regulation 2022/2065](https://eur-lex.europa.eu/eli/reg/2022/2065/oj), Article 16, requires hosting services to offer an electronic notice-and-action mechanism for illegal content.

Privacy: the [California regulations](https://cppa.ca.gov/regulations/) set the methods businesses covered by the CCPA must offer for consumer requests, generally two or more. Accessibility: the [European Accessibility Act](https://eur-lex.europa.eu/eli/dir/2019/882/oj) applies from June 28, 2025 to many consumer services in the EU. Marketing email: the [FTC's CAN-SPAM guide](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business) requires a working opt-out honored within 10 business days.

Agents increasingly file these requests for people. A notice with a working channel is something an agent can act on; a notice without one fails the person and the check.

## How to fix it

### 1. Decide which notices apply

Not every site needs all six. A site without user uploads is generally outside the TAKE IT DOWN Act, and the DSA applies to services with users in the EU. Publish the notices that apply to you; the score is a prompt to check, not a legal requirement to publish everything.

### 2. Put each notice where people (and the check) look

One `/legal` page with a section per topic works, as do separate `/privacy`, `/accessibility` or `/dmca` pages. Each notice needs a real channel: a form or a monitored address. Replace the names, addresses and deadlines below with your own; this is not legal advice.

/legal (six sections, each with a way to send the request):

```html
<h2 id="takedown">Report intimate images shared without consent (TAKE IT DOWN Act)</h2>
<p>If intimate images of you, real or AI-generated, were posted here without your consent,
  submit a removal request at <a href="/report">example.com/report</a> or email
  <a href="mailto:takedown@example.com">takedown@example.com</a>. No account is needed.
  We remove valid reports and known identical copies within 48 hours.</p>

<h2 id="dmca">Copyright (DMCA)</h2>
<p>Our designated agent: Jane Doe, <a href="mailto:copyright@example.com">copyright@example.com</a>,
  1 Main St, City, ST 00000. Send notices and counter-notices to this address.</p>

<h2 id="dsa">Illegal content (EU Digital Services Act)</h2>
<p>Report illegal content with the <a href="/report">notice form</a>; we acknowledge receipt,
  decide, and send a statement of reasons. Point of contact: <a href="mailto:legal@example.com">legal@example.com</a>.</p>

<h2 id="privacy">Your privacy rights</h2>
<p>Submit an access, deletion or correction request with the <a href="/privacy/request">request form</a>
  or at <a href="mailto:privacy@example.com">privacy@example.com</a>. We answer within 45 days.</p>

<h2 id="accessibility">Accessibility</h2>
<p>We aim to meet WCAG 2.2 AA. Report an accessibility barrier at
  <a href="mailto:accessibility@example.com">accessibility@example.com</a>; we reply within 5 business days.</p>

<h2 id="optout">Marketing opt-out</h2>
<p>Unsubscribe with the link in any marketing email, or opt out here without logging in:
  <a href="/unsubscribe">example.com/unsubscribe</a>.</p>
```

### 3. Publish it on your stack

Link the page from the footer of every page so people and agents find it from anywhere.

#### Static site

Save the page as `legal/index.html` so it answers at `/legal`, and link it in the footer.

#### WordPress

Create a page with the slug `legal` (or put sections on `/privacy` and `/accessibility`) and add it to the footer menu. Core includes personal-data export and erasure tools under Tools ([WordPress privacy](https://wordpress.org/documentation/article/wordpress-privacy/)), which help you answer privacy requests.

#### Next.js

`app/legal/page.tsx` renders the same sections on the server; link it from the root layout's footer.

#### Cloudflare

Deploy the page with your static assets. If you have no backend for the request forms, a hosted desk can take the requests (next step).

### 4. Give each request a working channel

A mailbox nobody reads fails the law's intent. [Compliance Desk](https://takeitdown.agentexchange.work) runs hosted request forms for these topics with ticket numbers and deadline clocks; its free check is the one this grade calls.

## How to verify

Run the free desk check to see which notices it found and the text it matched, then re-grade.

```sh
curl -s "https://takeitdown.agentexchange.work/check.json?url=example.com" | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>{const j=JSON.parse(s);console.log("desk score",j.score+"/"+j.max);for(const [k,r] of Object.entries(j.results||{}))console.log(k,r.score+"/2")})'
```

A desk score of 6/12 or more gives 2/2 in the grade; each topic shows 0, 1 or 2.

Re-grade: https://grade.agentexchange.work/grade?url=example.com&fresh=1

## Questions

### Does my site need a TAKE IT DOWN Act notice?

The FTC says the law covers platforms that primarily provide a forum for user-generated content, or that regularly publish or host intimate content shared without consent; it names social media, messaging, image or video sharing and gaming platforms. A site without user uploads is generally outside it. This is information, not legal advice.

### Is passing this check the same as being compliant?

No. It finds notices and request channels by text search; compliance depends on the process behind them.

### Why does an agent-readiness grade check legal notices?

Agents act for people: filing a takedown, an opt-out or a privacy request. A site whose notices and channels can be found and used is one an agent can transact with.

## Sources

- [Complying with the TAKE IT DOWN Act](https://www.ftc.gov/business-guidance/resources/complying-take-it-down-act) (Federal Trade Commission)
- [17 U.S. Code § 512: limitations on liability relating to material online](https://www.law.cornell.edu/uscode/text/17/512) (Cornell Legal Information Institute)
- [Regulation (EU) 2022/2065 (Digital Services Act)](https://eur-lex.europa.eu/eli/reg/2022/2065/oj) (EUR-Lex)
- [California Consumer Privacy Act regulations](https://cppa.ca.gov/regulations/) (California Privacy Protection Agency)
- [Directive (EU) 2019/882 (European Accessibility Act)](https://eur-lex.europa.eu/eli/dir/2019/882/oj) (EUR-Lex)
- [CAN-SPAM Act: a compliance guide for business](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business) (Federal Trade Commission)
- [WordPress privacy (export and erase personal data tools)](https://wordpress.org/documentation/article/wordpress-privacy/) (WordPress.org)

## Related

- [security.txt](https://grade.agentexchange.work/fix/security-txt.md): An RFC 9116 contact file at /.well-known/security.txt (not scored by the grade).
- [Structured data](https://grade.agentexchange.work/fix/structured-data.md): One JSON-LD block that parses plus og:title and og:description on the home page.
- [All fix guides](https://grade.agentexchange.work/fix)
