AI-Generated Content Harms Your Reputation
AI-generated deepfakes, synthetic voice recordings, and manipulated images that portray you doing or saying things you did not do are an emerging legal problem. This page explains how existing English law applies and what practical steps you can take.
Quick Answer
There is no single deepfake law in England and Wales, but existing law applies: criminal intimate image offences under Online Safety Act 2023 s.188 cover AI-generated intimate images; defamation law applies where false factual statements damage your reputation; misuse of private information and UK GDPR apply to personal data; and data protection law covers processing of biometric data without consent.
Full Explanation
AI-generated content that harms individuals falls across several overlapping areas of English law. The Online Safety Act 2023 specifically criminalised the sharing of AI-generated deepfake intimate images without consent under s.188 โ treating a realistic synthetic intimate image the same as a real photograph. Sharing it without consent is a criminal offence punishable by up to two years' imprisonment.
For non-intimate deepfakes โ for example, synthetic video of a person appearing to make statements they never made โ the primary legal routes are defamation and misuse of private information. Under the Defamation Act 2013, a statement of fact (including a video that implies a person said something) that is false and causes serious harm to the claimant's reputation is actionable. Platforms hosting defamatory deepfake content lose their secondary publisher defence once put on notice.
The tort of misuse of private information, developed from Campbell v MGN Ltd [2004], protects information in respect of which the claimant has a reasonable expectation of privacy. AI-generated content using a person's likeness without consent may qualify if the manner of use is sufficiently intrusive. The Human Rights Act 1998 Art 8 provides the underlying framework.
The UK GDPR and Data Protection Act 2018 are relevant where the AI system has processed personal data about you โ including facial recognition data to create the deepfake. Biometric data is 'special category' data under UK GDPR Art 9, requiring explicit consent or a specific exemption for lawful processing. A subject access request (Art 15) can reveal what data a company holds, and an erasure request (Art 17) can demand deletion.
Practically, the fastest remedy is usually platform takedown and an ICO complaint. For intimate image deepfakes, the Revenge Porn Helpline can assist with emergency removal.
Legal Basis
- ยงOnline Safety Act 2023 s.188 โ offence of sharing AI-generated intimate images without consent
- ยงDefamation Act 2013 ss.1โ2 โ serious harm threshold; truth defence
- ยงUK GDPR Arts 9, 15, 17 โ processing of biometric data; subject access and erasure rights
- ยงCampbell v MGN Ltd [2004] UKHL 22 โ misuse of private information as an independent tort
What To Do
Preserve Evidence With Metadata
Download and preserve the deepfake content along with its URL, platform page, any associated text, and any metadata available (creation date, account information). Note the date and time of discovery. This evidence is essential for criminal reports, platform complaints, and court proceedings.
Demand Takedown From the Platform
Report the content to the platform using its illegal content reporting mechanism. For intimate image deepfakes, simultaneously contact the Revenge Porn Helpline. For reputational content, send a formal legal notice identifying the content, explaining why it is defamatory or a misuse of private information, and demanding removal.
Complain to the ICO for Personal Data Misuse
If the deepfake was created using your personal data without your consent, file a complaint with the ICO at ico.org.uk. First send a subject access request to any company you believe holds your data, and an erasure request under UK GDPR Art 17. If they refuse or do not respond within one month, escalate to the ICO.
Consider a Court Order Against the Publisher
If the content remains online or continues to circulate, instruct a solicitor to apply for an injunction to restrain further publication and compel deletion. Where the publisher is anonymous, a Norwich Pharmacal order can be used to identify them.
Important Deadlines
Important Warnings
Act quickly โ deepfake content can spread across multiple platforms rapidly and may be cached or reposted by third parties before removal requests are processed.
The law in this area is developing fast. While the Online Safety Act 2023 covers intimate image deepfakes, reputational deepfakes rely on existing law not designed for AI-generated content.
Realistic deepfakes that are likely to be taken as genuine are unlikely to benefit from a satire or fiction defence.
Frequently asked questions
- What legal options do I have if an AI video makes me say things I never said?
- For non-intimate deepfakes, such as synthetic videos of you making false statements, you can pursue a claim under the Defamation Act 2013. The content must be a false statement of fact that causes serious harm to your reputation. Additionally, the tort of misuse of private information may apply if the use of your likeness is sufficiently intrusive, protecting your reasonable expectation of privacy under the Human Rights Act 1998.
- How can I get my personal data deleted if it was used to create a deepfake?
- You should first send a subject access request to the company holding your data, followed by an erasure request under Article 17 of the UK GDPR. If they refuse or fail to respond within one month, you can escalate the matter by filing a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. This process addresses the unlawful processing of your personal or biometric data.
- What is the quickest way to get a harmful deepfake removed from the internet?
- The fastest practical remedy is usually requesting a takedown from the hosting platform using their illegal content reporting mechanism. For intimate image deepfakes, you should also contact the Revenge Porn Helpline for emergency removal assistance. It is crucial to act quickly because deepfake content can spread rapidly across multiple platforms and be cached or reposted by third parties before removal requests are processed.
- What evidence should I save if I find a deepfake of myself online?
- You must preserve the deepfake content along with its URL, platform page, associated text, and any available metadata, such as creation dates and account information. You should also note the date and time you discovered the content. This evidence is essential for supporting criminal reports, platform complaints, and any subsequent court proceedings you may need to initiate.