Synthetic Media and the Law: Your Rights When Someone Deepfakes You

Discovering that someone has created a deepfake of you — a synthetic video, audio clip, or image using your face or voice without your consent — is disorienting and frightening. It's also, in 2026, surprisingly common. Whether it's a sexually explicit deepfake, a fake video of you saying something you never said, or AI-generated audio of your voice used in a scam, you have legal options. This guide explains what they are, how to pursue them, and what the realistic expectations are.

The Legal Landscape in 2026

There is no single comprehensive "deepfake law" in the United States, but a patchwork of state and federal laws covers most of the harms deepfakes cause. Additionally, the EU's AI Act and Digital Services Act create enforceable rights for EU residents. The legal tools available to you depend on what kind of deepfake was created, who created it, and where you and the creator are located.

As of 2026, over 40 US states have enacted some form of deepfake-specific legislation, typically addressing two categories: non-consensual intimate deepfakes (sexually explicit content) and election-related deepfakes. Federal legislation has passed in narrow areas. This means the specific protections you have depend significantly on your state.

Non-Consensual Intimate Deepfakes

This is the most well-developed area of deepfake law. The DEEPFAKES Accountability Act (federal) and state-level laws in the majority of US states criminalize the creation and distribution of non-consensual intimate deepfakes. Critically, these laws don't require that the content was originally real — synthetic intimate content created using someone's likeness without their consent is covered even if it doesn't incorporate actual footage of them.

What you can do: In states with civil remedies (which include most states with deepfake laws), you can sue for damages and injunctive relief — a court order requiring the content to be taken down and the creator to stop. Criminal referral to law enforcement is also available in most jurisdictions; whether prosecutors pursue it depends on the severity and available evidence. Document everything before content is removed: screenshots, URLs, timestamps, and any identifying information about the account that posted it.

Defamation

A deepfake that makes you appear to say or do something that harms your reputation, and that a viewer could reasonably believe is real, may constitute defamation. The core elements of defamation are: a false statement of fact (the deepfake implies things happened that didn't); publication (sharing it with others); identification (it's clear it depicts you); and harm to reputation.

For public figures, the bar is higher — you must show the creator acted with "actual malice" (knowing the content was false or acting with reckless disregard for its truth). For private individuals, the standard is typically negligence. In practice, defamation claims against deepfake creators face two practical challenges: identifying the creator (who may be anonymous), and proving reputational harm. The strongest cases involve deepfakes that were widely circulated and caused demonstrable professional or personal consequences.

Right of Publicity

Every US state recognizes some version of the right of publicity — the right to control the commercial use of your name, image, likeness, and voice. Deepfakes that use your likeness commercially (in advertising, to sell products, to monetize content) without your consent may violate this right even if they're not sexually explicit and don't constitute defamation. Right of publicity claims are particularly relevant when AI is used to generate endorsements or commercial content featuring your likeness.

Harassment and Cyberstalking Laws

If a deepfake is used to harass you — repeatedly sent to you or people you know, used to damage your relationships, or part of a broader pattern of harassment — it may constitute cyberstalking or cyberbullying under state law. These claims are criminal rather than civil in most states, and involve reporting to law enforcement rather than (or in addition to) civil action.

Copyright

If the deepfake incorporated actual copyrighted content — real footage of you that you own copyright in — you may have a copyright infringement claim against the creator. Copyright claims have a practical advantage: they can be used to force takedowns from platforms quickly through the DMCA notice-and-takedown process without requiring a lawsuit. This is often the fastest route to getting content removed, even if the underlying harm isn't primarily copyright-based.

Pursuing Takedowns

For most victims, the immediate priority is removing the content, not pursuing the creator through courts. The fastest routes are platform reporting and DMCA notices. Platform reporting: every major platform has specific reporting mechanisms for synthetic intimate content; many have expedited processes for non-consensual deepfakes that process takedowns in hours rather than days. DMCA notices: if you have a copyright interest in the underlying content used to create the deepfake, you can send a DMCA takedown notice directly to the platform, which is legally required to act on valid notices promptly. Stopncii.org: a non-profit service that creates a hash of intimate content and distributes it to participating platforms so they can proactively remove it — useful when content may be distributed across multiple platforms.

Identifying the Creator

If you want to pursue legal action, you need to identify who created the deepfake. This is often the hardest step. Options include: subpoenas to platforms requiring disclosure of account information (requires filing a lawsuit first in most cases); working with law enforcement (who have broader compulsory process); hiring a private investigator with digital forensics capability; and examining any public information associated with the posting account. Preservation is important — send a preservation request to the platform asking them to preserve account data even if the content is taken down.

Evidence Preservation

Before taking any action to remove content, document everything comprehensively. Screenshots of every page where the content appears, including URLs, timestamps, view counts, and associated comments. Download copies of the content if safe to do so. Record metadata — the date you discovered it, how you found it, any information about the account. Save communications — if the creator contacted you, preserve all messages. This documentation is essential if you later pursue legal action, make a police report, or need to demonstrate the existence and extent of the content.

What to Realistically Expect

Deep fakes cause real harm, but legal remedies are imperfect. Criminal prosecution depends on prosecutorial priorities and the availability of evidence. Civil lawsuits require identifying the defendant, which is often impossible for anonymous online actors, and the damages award may be nominal even when you win. The most reliable outcomes are: content removal (which platform mechanisms often achieve within days for clear violations), and restraining orders or injunctions in cases where the creator is known.

Organizations that provide support and practical guidance include the Cyber Civil Rights Initiative (cybercivilrights.org), the National Center for Victims of Crime, and the Electronic Frontier Foundation. If you're a public figure, your legal team can pursue more aggressive options including pre-litigation subpoenas and federal civil claims.

The International Dimension

If the creator is in another country, enforcement is significantly harder. The EU's DSA and AI Act give EU residents stronger takedown rights against platforms operating in the EU. UK law has strengthened non-consensual intimate image protections significantly. But for creators in jurisdictions with weak or no deepfake law, practical remedies are limited to platform-level action rather than legal action against the individual.

Protecting Yourself Proactively

While the focus of this guide is on responding after a deepfake is created, there are proactive steps that can reduce risk. Limit the amount of high-quality audio and video of yourself that's publicly available — though this is increasingly difficult for any public figure. Monitor your digital presence for fake content using tools that search for your likeness. Establish a baseline of your authentic voice and image through dated, verified content so that fabrications can be more easily demonstrated as fabrications.

The law is catching up to deepfake technology, but it hasn't caught up fully. Until it does, the combination of platform takedown mechanisms, state laws, and federal laws covering specific harm categories provides meaningful (if imperfect) protection for most victims.