Why Facebook content spreads quickly

Facebook Groups can host closed NCII trading communities that escape automated moderation. Marketplace listings have been used to distribute NCII as fake product images, and Profile photos can be reverse searched.

Ireland legal framework

Harassment, Harmful Communications and Related Offences Act 2020, sections 2 and 3. Section 2 (intent to cause harm): up to 7 years on indictment. Section 3 (without intent to harm): up to 12 months on summary conviction.

The civil erasure right under GDPR Article 17 (right to erasure) plus Data Protection Act 2018 is enforceable against Facebook regardless of where Facebook processes the data, where the data subject is in Ireland.

Facebook removal route

Facebook accepts NCII reports through Meta's NCII portal and through the in app report flow. Marketplace, Groups, and Profile content all share the same reporting pipeline.

Meta operates the NCII Hash Database Pilot in cooperation with the Cyber Civil Rights Initiative. A successful Facebook removal often produces a hash that is propagated to Instagram and other Meta platforms automatically.

Evidence preservation specific to Facebook

Capture the post URL, the group name, and the user profile URL. Facebook retains content metadata for 90 days post deletion which supports subpoena requests through Facebook Law Enforcement Online Requests.

Five step removal process

  1. 1

    Capture evidence from Facebook

    Capture the post URL, the group name, and the user profile URL. Facebook retains content metadata for 90 days post deletion which supports subpoena requests through Facebook Law Enforcement Online Requests.

  2. 2

    File Harassment, Harmful Communications and Related Offences Act 2020 (Coco's Law) criminal complaint

    Report to local police or national cybercrime unit. Hotline.ie can assist.

  3. 3

    Submit GDPR Article 17 (right to erasure) plus Data Protection Act 2018 erasure request to Facebook

    Facebook accepts NCII reports through Meta's NCII portal and through the in app report flow. Marketplace, Groups, and Profile content all share the same reporting pipeline. The request must identify the URLs and cite the legal basis. DPC accepts complaints for non compliance.

  4. 4

    Run a biometric scan to find every other hosting location

    Content rarely stays on one platform. ScanErase identifies every current location in a single scan including mirrored copies and AI generated variants of the same image.

  5. 5

    Dispatch parallel TAKE IT DOWN Act notice to Facebook

    Facebook is a covered platform with a 48 hour federal removal obligation. ScanErase files the notice within 5 minutes of authorisation.

Frequently asked questions

Can Facebook be required to remove intimate images of a Ireland resident?

Yes. GDPR Article 17 (right to erasure) plus Data Protection Act 2018 gives any data subject in Ireland the right to require erasure. Facebook operates a dedicated NCII removal portal that processes these requests. Where Facebook is also subject to US jurisdiction, the TAKE IT DOWN Act adds a 48 hour federal obligation.

What is the criminal exposure of the person who posted to Facebook from Ireland?

Harassment, Harmful Communications and Related Offences Act 2020, sections 2 and 3. Section 2 (intent to cause harm): up to 7 years on indictment. Section 3 (without intent to harm): up to 12 months on summary conviction.

How does Facebook verify a Ireland erasure request?

Facebook accepts NCII reports through Meta's NCII portal and through the in app report flow. Marketplace, Groups, and Profile content all share the same reporting pipeline. DPC can be petitioned if Facebook fails to act within the statutory window.

Can the Ireland regulator force Facebook to remove content?

Coimisiún na Meán is the Online Safety Commissioner under the Online Safety and Media Regulation Act 2022 with codes of practice covering intimate image abuse.

What evidence should I capture from Facebook?

Capture the post URL, the group name, and the user profile URL. Facebook retains content metadata for 90 days post deletion which supports subpoena requests through Facebook Law Enforcement Online Requests.

Related guides