What Is the DMCA?
The Digital Millennium Copyright Act was signed into law on October 28, 1998. It amended U.S. copyright law to address the challenges of digital technology and the internet. The DMCA implemented two World Intellectual Property Organization (WIPO) treaties from 1996 and created new rules specifically for online copyright enforcement.
For website owners, the two most important parts of the DMCA are the safe harbor provisions (Section 512) and the anti-circumvention provisions (Section 1201). The safe harbor provisions are what most businesses will encounter, as they govern the process for handling copyright complaints about content hosted on your website.
Safe Harbor Provisions (Section 512)
Section 512 of the DMCA provides "safe harbor" protection for online service providers, including website operators who host user-generated content. If someone posts copyrighted material on your website without permission, the safe harbor can protect you from being held liable for that infringement -- but only if you meet certain conditions:
- You must not have actual knowledge that the material is infringing
- You must not receive a direct financial benefit from the infringing activity where you have the ability to control it
- You must designate an agent to receive DMCA takedown notices and register that agent with the U.S. Copyright Office
- Upon receiving a valid takedown notice, you must act expeditiously to remove or disable access to the allegedly infringing material
- You must have and reasonably implement a policy for terminating repeat infringers
The safe harbor does not prevent you from being sued. It provides a defense if you are sued and can show that you complied with the DMCA's requirements.
The Takedown Notice Process
The DMCA established a notice-and-takedown system that works as follows:
- Copyright owner sends a takedown notice -- The notice must identify the copyrighted work, the infringing material, and include a statement under penalty of perjury that the claim is made in good faith. It must be sent to the website's designated DMCA agent.
- Website operator removes the content -- Upon receiving a valid notice, the operator must promptly remove or disable access to the material and notify the user who posted it
- User may file a counter-notice -- If the user believes the takedown was a mistake or that they have a legal right to use the material, they can file a counter-notice with specific required elements
- Website operator restores the content -- After receiving a valid counter-notice, the operator must wait 10 to 14 business days, and if the copyright owner does not file a lawsuit, the content should be restored
What Makes a Valid Takedown Notice?
A DMCA takedown notice must include all of the following elements to be valid under the statute:
- A physical or electronic signature of the copyright owner or authorized agent
- Identification of the copyrighted work being infringed
- Identification of the infringing material and information sufficient to locate it (typically a URL)
- Contact information for the complaining party
- A statement that the complaining party has a good-faith belief that the use is not authorized
- A statement, under penalty of perjury, that the information in the notice is accurate and that the complaining party is authorized to act on behalf of the copyright owner
Anti-Circumvention (Section 1201)
Section 1201 of the DMCA makes it illegal to circumvent technological measures that control access to copyrighted works (such as DRM, encryption, or access controls). It also prohibits distributing tools or services primarily designed to bypass these protections.
For most small business website owners, Section 1201 is less directly relevant than the safe harbor provisions. However, if your business involves digital content distribution, software licensing, or subscription-based access, you should be aware of these protections.
When the DMCA Applies to Your Business
The DMCA is relevant to your business in two main scenarios:
- Your website hosts user-generated content -- If users can post comments, upload images, share files, or contribute content to your site, you could receive DMCA takedown notices and need the safe harbor protection
- Your content appears on someone else's site -- If someone copies your website content, blog posts, images, or other original material, you can use the DMCA takedown process to have it removed
Penalties and Consequences
Filing a false DMCA takedown notice carries legal consequences. The DMCA includes a provision (Section 512(f)) allowing targets of false notices to seek damages, including legal fees, against those who knowingly make material misrepresentations in a takedown notice.
For website operators, failing to comply with the safe harbor requirements means losing the protection the DMCA offers. Without safe harbor, you could be held directly or secondarily liable for copyright infringement by your users, which can result in statutory damages of $750 to $30,000 per work infringed, or up to $150,000 per work for willful infringement under the Copyright Act.
Practical Steps for Website Owners
- Designate a DMCA agent -- If your site hosts any user-generated content, register a designated agent with the U.S. Copyright Office through their online system at copyright.gov
- Publish a DMCA policy -- Include a page on your website explaining how to submit takedown notices and providing your agent's contact information
- Have a repeat infringer policy -- Document and enforce a policy for terminating users who repeatedly infringe copyrights
- Respond to takedown notices promptly -- When you receive a valid notice, remove the content quickly and notify the user
- Protect your own content -- If you find your original content copied elsewhere, use the DMCA takedown process to have it removed. Most hosting companies and platforms have procedures for receiving notices.
- Keep records -- Document all takedown notices received, actions taken, and counter-notices processed
For more on copyright and licensing, see our guide on Content Attribution and Open Source.