2257 in plain English

The statute is short and its requirements are concrete. Here they are, without the scare-marketing that usually surrounds the subject.

What it requires#

18 U.S.C. § 2257 applies to producers of visual depictions of actual sexually explicit conduct. For every such depiction, a producer must:

• Check and record identity and age for every performer. The check is a government-issued photo ID, examined before production. The record keeps the performer's legal name, date of birth, and every other name they have performed under.
• Keep a record of every depiction. Each piece of content is tied to the performers in it, including the title it was published under and where it was published.
• Publish a notice stating where the records are held. Every copy of the content carries a statement naming the Custodian of Records and a street address where the records can be inspected.
• Keep the records, organised for inspection. The implementing regulations, 28 C.F.R. Part 75, spell out how: indexed and cross-referenced by performer name and alias, retrievable on request, and retained for years, not months. Retention and deletion covers how long in practice.

None of this is optional for content the law covers, and none of it is satisfied by good intentions. It is satisfied by records.

Who counts as a producer#

Almost every argument about whether 2257 applies to someone is really an argument about whether they are a producer, and the definition is broader than most people assume.

The regulations split the role in two. A primary producer actually creates the depiction: they operate the camera, or arrange and direct the shoot. A secondary producer publishes, reproduces, or reissues it: they run the site it appears on, sell it, or distribute it. Both must hold records; a secondary producer may hold copies of the primary producer's records rather than examining IDs again. Being one does not excuse you from being the other, and most working creators are both.

The cases readers actually arrive with:

• A solo creator filming themselves is the primary producer of that content, and the secondary producer of every site they publish it to under their own control. One person, full obligations.
• A producer shooting with hired performers is the primary producer, and needs an ID record and a release for every performer in every scene, kept current as content is published.
• A platform hosting other people's uploads may fall outside the definition where it only provides hosting and does not manage the sexually explicit content. The exclusions are narrow and fact-specific; a platform that curates, produces, or commissions content is in different territory. This is the one case where "talk to an attorney" is the entire answer.
• Someone reposting content they did not shoot is a secondary producer of it. Not having been at the shoot does not remove the obligation to hold records for what you publish.

The mistake almost everyone makes#

The most common belief in this space is that publishing through a platform moves the obligation to the platform. It does not.

When a platform verifies your ID, it is building its own records for its own obligations as a distributor. Those records belong to the platform, cover the platform, and are not available to you. If you are a producer of the content, your obligation to hold records exists independently, and "the platform verified me" has never been an answer an inspector or a processor accepts. The obligation follows the producer, not the publishing route.

What a Custodian of Records does#

The records have to live somewhere, with someone answerable for them. That is the Custodian of Records: the named party in your 2257 notice who holds the records and can produce them for inspection at the stated address. The regulations expect a real place where records are actually kept and can actually be examined, which is why the notice carries a street address and why a box number does not serve the purpose.

This is the detail most solo creators discover too late: the address on the notice is published with the content. Without a custodian arrangement, the address that satisfies the requirement is usually a home address, in a notice attached to adult content.

Designating Easy2257 as your custodian moves three things: the address on your notice, the intake of inspection requests, and the day-to-day custody and organisation of the records. It does not move the underlying obligation. You remain the producer; the records remain yours to keep accurate and complete. A custodian holds and produces records. It cannot make incomplete records complete.

Where Easy2257 fits#

Taking the requirements from the top, one at a time:

• Identity and age records: performers are ID-verified when you invite them to a scene, or when you verify yourself as a solo creator.
• The record of every depiction: your scenes and content log, described in what we store.
• The notice: your 2257 statement is generated and hosted for you, with the custodian address on it, ready to link from wherever you publish.
• Organised, retained records: cross-referenced indexes and the export archive are covered in what we store, and the retention rules in retention and deletion.

The card networks impose a second, separate set of requirements on the same content; Mastercard AN 5196 and Visa VIRP covers those.

Reading further#

The primary sources are short enough to read directly:

• 18 U.S.C. § 2257, the statute itself.
• 28 C.F.R. Part 75, the implementing regulations: definitions, record formats, indexing, and inspection.