AI-Generated Content Harms Your Reputation
AI-generated deepfakes, synthetic voice recordings, and manipulated images that portray you doing or saying things you did not do are an emerging legal problem. This page explains how existing English law applies and what practical steps you can take.
Quick Answer
There is no single deepfake law in England and Wales, but existing law applies: criminal intimate image offences under Online Safety Act 2023 s.188 cover AI-generated intimate images; defamation law applies where false factual statements damage your reputation; misuse of private information and UK GDPR apply to personal data; and data protection law covers processing of biometric data without consent.
Full Explanation
AI-generated content that harms individuals falls across several overlapping areas of English law. The Online Safety Act 2023 specifically criminalised the sharing of AI-generated deepfake intimate images without consent under s.188 — treating a realistic synthetic intimate image the same as a real photograph. Sharing it without consent is a criminal offence punishable by up to two years' imprisonment.
For non-intimate deepfakes — for example, synthetic video of a person appearing to make statements they never made — the primary legal routes are defamation and misuse of private information. Under the Defamation Act 2013, a statement of fact (including a video that implies a person said something) that is false and causes serious harm to the claimant's reputation is actionable. Platforms hosting defamatory deepfake content lose their secondary publisher defence once put on notice.
The tort of misuse of private information, developed from Campbell v MGN Ltd [2004], protects information in respect of which the claimant has a reasonable expectation of privacy. AI-generated content using a person's likeness without consent may qualify if the manner of use is sufficiently intrusive. The Human Rights Act 1998 Art 8 provides the underlying framework.
The UK GDPR and Data Protection Act 2018 are relevant where the AI system has processed personal data about you — including facial recognition data to create the deepfake. Biometric data is 'special category' data under UK GDPR Art 9, requiring explicit consent or a specific exemption for lawful processing. A subject access request (Art 15) can reveal what data a company holds, and an erasure request (Art 17) can demand deletion.
Practically, the fastest remedy is usually platform takedown and an ICO complaint. For intimate image deepfakes, the Revenge Porn Helpline can assist with emergency removal.
Legal Basis
- §Online Safety Act 2023 s.188 — offence of sharing AI-generated intimate images without consent
- §Defamation Act 2013 ss.1–2 — serious harm threshold; truth defence
- §UK GDPR Arts 9, 15, 17 — processing of biometric data; subject access and erasure rights
- §Campbell v MGN Ltd [2004] UKHL 22 — misuse of private information as an independent tort
What To Do
Preserve Evidence With Metadata
Download and preserve the deepfake content along with its URL, platform page, any associated text, and any metadata available (creation date, account information). Note the date and time of discovery. This evidence is essential for criminal reports, platform complaints, and court proceedings.
Demand Takedown From the Platform
Report the content to the platform using its illegal content reporting mechanism. For intimate image deepfakes, simultaneously contact the Revenge Porn Helpline. For reputational content, send a formal legal notice identifying the content, explaining why it is defamatory or a misuse of private information, and demanding removal.
Complain to the ICO for Personal Data Misuse
If the deepfake was created using your personal data without your consent, file a complaint with the ICO at ico.org.uk. First send a subject access request to any company you believe holds your data, and an erasure request under UK GDPR Art 17. If they refuse or do not respond within one month, escalate to the ICO.
Consider a Court Order Against the Publisher
If the content remains online or continues to circulate, instruct a solicitor to apply for an injunction to restrain further publication and compel deletion. Where the publisher is anonymous, a Norwich Pharmacal order can be used to identify them.
Important Deadlines
Important Warnings
Act quickly — deepfake content can spread across multiple platforms rapidly and may be cached or reposted by third parties before removal requests are processed.
The law in this area is developing fast. While the Online Safety Act 2023 covers intimate image deepfakes, reputational deepfakes rely on existing law not designed for AI-generated content.
Realistic deepfakes that are likely to be taken as genuine are unlikely to benefit from a satire or fiction defence.