CP-02
Consumer Protection
Non-Consensual Intimate Imagery
Generating, distributing, or facilitating the distribution of non-consensual intimate imagery of real, identifiable individuals using AI tools is prohibited. This applies to developers of image and video generation tools, platforms that distribute such content, and providers of facilitation services. Liability can arise even where the developer does not directly generate the content.
Applies to DeveloperDeployerDistributor Sector General Consumer AppSocial Media
Bills — Enacted
2
unique bills
Bills — Proposed
7
Last Updated
2026-03-29
Core Obligation

Generating, distributing, or facilitating the distribution of non-consensual intimate imagery of real, identifiable individuals using AI tools is prohibited. This applies to developers of image and video generation tools, platforms that distribute such content, and providers of facilitation services. Liability can arise even where the developer does not directly generate the content.

Sub-Obligations4 sub-obligations
Bills That Map This Requirement 9 bills
Bill
Status
Sub-Obligations
Section
Enacted 2025-01-01
CP-02.4
Civ. Code § 3344.1(a)(2)(A)(i)-(ii)
Plain Language
Any person who produces, distributes, or makes available a computer-generated digital replica of a deceased personality's voice or likeness in an expressive audiovisual work or sound recording is liable for at least $10,000 or actual damages (whichever is greater) unless prior consent was obtained from the person controlling the deceased personality's rights. Five categories of use are exempt from the consent requirement: news/public affairs/sports, comment/criticism/scholarship/satire/parody, documentary or biographical use (unless the use creates a false impression the deceased person actually participated), fleeting or incidental use, and advertisements for any of those exempt works. Notably, the definition of 'digital replica' excludes copyright-holder-authorized sampling, remixing, mastering, and digital remastering. The right persists for 70 years after death, and successors must register with the Secretary of State before recovering damages.
(i) Notwithstanding paragraph (1) and subject to clause (ii), a person who produces, distributes, or makes available the digital replica of a deceased personality's voice or likeness in an expressive audiovisual work or sound recording without prior consent from a person specified in subdivision (c) shall be liable to any injured party in an amount equal to the greater of ten thousand dollars ($10,000) or the actual damages suffered by a person controlling the rights to the deceased personality's likeness. (ii) For purposes of this section, a digital replica may be used without consent if the use of the digital replica meets any of the following criteria: (I) The use is in connection with any news, public affairs, or sports broadcast or account. (II) The use is for purposes of comment, criticism, scholarship, satire, or parody. (III) The use is a representation of the individual as the individual's self in a documentary or in a historical or biographical manner, including some degree of fictionalization, unless the use is intended to create, and does create, the false impression that the work is an authentic recording in which the individual participated. (IV) The use is fleeting or incidental. (V) The use is in an advertisement or commercial announcement for a work described in subclauses (I) to (IV), inclusive.
Enacted 2026-01-01
CP-02.4
Civ. Code § 3344(a), (f), (g)
Plain Language
SB 11 amends California's right-of-publicity statute to expressly clarify that 'voice' and 'likeness' include AI-generated digital replicas. This means that any person who knowingly uses another person's AI-generated digital replica — on products, merchandise, or for advertising or soliciting purposes — without prior consent is liable under the same framework that has long applied to traditional photographs and voice recordings. Damages are the greater of $750 or actual damages, plus disgorgement of profits, potential punitive damages, and attorney's fees. The amendment does not create a new cause of action but extends the existing right-of-publicity private cause of action to cover AI-generated content. Exemptions exist for news, public affairs, sports broadcasts, and political campaigns (subdivision (c)), and for advertising media owners/employees absent knowledge (subdivision (e)).
(a) Any person who knowingly uses another's name, voice, signature, photograph, or likeness, in any manner, on or in products, merchandise, or goods, or for purposes of advertising or selling, or soliciting purchases of, products, merchandise, goods or services, without such person's prior consent, or, in the case of a minor, the prior consent of their parent or legal guardian, shall be liable for any damages sustained by the person or persons injured as a result thereof. In addition, in any action brought under this section, the person who violated the section shall be liable to the injured party or parties in an amount equal to the greater of seven hundred fifty dollars ($750) or the actual damages suffered by them as a result of the unauthorized use, and any profits from the unauthorized use that are attributable to the use and are not taken into account in computing the actual damages. In establishing these profits, the injured party or parties are required to present proof only of the gross revenue attributable to the unauthorized use, and the person who violated this section is required to prove their deductible expenses. Punitive damages may also be awarded to the injured party or parties. The prevailing party in any action under this section shall also be entitled to attorney's fees and costs.
(f) For the purposes of this section, a voice or likeness includes a digital replica, as defined in Section 3344.1.
(g) The remedies provided for in this section are cumulative and shall be in addition to any others provided for by law.
Failed 2026-07-01
CP-02.4
Fla. Stat. § 540.08(2)
Plain Language
No person may commercially publish, print, display, or otherwise publicly use an individual's name, portrait, photograph, image, or other likeness created through generative AI without express written or oral consent from the individual, an authorized representative, or (if the individual is deceased) a designated heir — the surviving spouse or surviving children. Post-mortem rights extend 40 years after death. This extends Florida's existing right of publicity to AI-generated likenesses. Violations are actionable by injunction, actual damages (including reasonable royalty), and punitive damages. Servicemember violations carry an additional civil penalty of up to $1,000 per commercial transaction.
A person may not publish, print, display, or otherwise publicly use for trade or for any commercial or advertising purpose the name, portrait, photograph, image, or other likeness of an individual created through generative artificial intelligence without the express written or oral consent to such use given by any of the following: (a) The individual. (b) Any other person authorized in writing by the individual to license the commercial use of the individual's name, image, or likeness. (c) If the individual is deceased: 1. A person authorized in writing to license the commercial use of the individual's name, image, or likeness; or 2. If a person is not authorized, any one individual from a class composed of the deceased individual's surviving spouse and surviving children. A legal parent or guardian may give consent on behalf of a minor surviving child.
Failed 2026-07-01
CP-02.4
Fla. Stat. § 540.08(2)-(3)
Plain Language
No person may commercially use an individual's name, portrait, photograph, image, or other likeness — whether created through generative AI (subsection 2) or by traditional means (subsection 3) — without express consent from the individual, an authorized representative, or, if the individual is deceased, an authorized person or a surviving spouse/child. The generative AI provision in subsection (2) is new and creates a parallel consent requirement specifically for AI-generated likenesses. Post-mortem rights extend 40 years after death. Violations are actionable through injunction, actual damages including reasonable royalty, and punitive damages. Servicemember likenesses carry an additional civil penalty of up to $1,000 per commercial transaction.
(2) A person may not publish, print, display, or otherwise publicly use for trade or for any commercial or advertising purpose the name, portrait, photograph, image, or other likeness of an individual created through generative artificial intelligence without the express written or oral consent to such use given by any of the following: (a) The individual. (b) Any other person authorized in writing by the individual to license the commercial use of the individual's name, image, or likeness. (c) If the individual is deceased: 1. A person authorized in writing to license the commercial use of the individual's name, image, or likeness; or 2. If a person is not authorized, any one individual from a class composed of the deceased individual's surviving spouse and surviving children. A legal parent or guardian may give consent on behalf of a minor surviving child. (3) A person may not publish, print, display or otherwise publicly use for purposes of trade or for any commercial or advertising purpose the name, portrait, photograph, image, or other likeness of an individual without the express written or oral consent to such use given by any of the following: (a) The individual. (b) Any other person authorized in writing by the individual to license the commercial use of the individual's name, image, or likeness. (c) If the individual is deceased: 1. A person authorized in writing to license the commercial use of the deceased individual's name, image, or likeness; or 2. If a person is not authorized, any one individual from a class composed of the individual's surviving spouse and surviving children. A legal parent or guardian may give consent on behalf of a minor surviving child.
Failed 2026-07-01
CP-02.4
Fla. Stat. § 540.08(2)-(3)
Plain Language
No person may commercially publish, display, or use an individual's name, portrait, image, or likeness — whether created through generative AI (subsection 2) or otherwise (subsection 3) — without express consent from the individual, an authorized representative, or (if deceased) an authorized licensee or surviving spouse/child. The AI-specific provision (subsection 2) extends existing right-of-publicity protections to AI-generated likenesses, covering post-mortem rights with a 40-year window after death. Consent may be written or oral. News media exceptions apply, though AI-generated content used in news must include a clear acknowledgment of speculation regarding authenticity. Remedies include injunctive relief, actual damages including reasonable royalty, and punitive or exemplary damages. An additional civil penalty of up to $1,000 per violation applies for unauthorized use of a servicemember's likeness.
(2) A person may not publish, print, display, or otherwise publicly use for trade or for any commercial or advertising purpose the name, portrait, photograph, image, or other likeness of an individual created through generative artificial intelligence without the express written or oral consent to such use given by any of the following: (a) The individual. (b) Any other person authorized in writing by the individual to license the commercial use of the individual's name, image, or likeness. (c) If the individual is deceased: 1. A person authorized in writing to license the commercial use of the individual's name, image, or likeness; or 2. If a person is not authorized, any one individual from a class composed of the deceased individual's surviving spouse and surviving children. A legal parent or guardian may give consent on behalf of a minor surviving child. (3) A person may not publish, print, display or otherwise publicly use for purposes of trade or for any commercial or advertising purpose the name, portrait, photograph, image, or other likeness of an individual without the express written or oral consent to such use given by any of the following: (a) The individual. (b) Any other person authorized in writing by the individual to license the commercial use of the individual's name, image, or likeness. (c) If the individual is deceased: 1. A person authorized in writing to license the commercial use of the deceased individual's name, image, or likeness; or 2. If a person is not authorized, any one individual from a class composed of the individual's surviving spouse and surviving children. A legal parent or guardian may give consent on behalf of a minor surviving child.
Pending 2026-07-01
CP-02.4
O.C.G.A. § 10-1-973(a)-(b), (f)
Plain Language
No person or entity may create, distribute, or commercially exploit a digital replica of an individual's likeness without express written consent from that individual. Consent must be specific and affirmative — it must spell out the allowance, extent, purpose, and duration of the use. Consent cannot be implied through silence, buried in general terms and conditions, or inferred from an unrelated prior agreement. The consent requirement applies regardless of whether the individual was compensated. Liability turns solely on consent — if the individual consented, there is no violation; if the individual did not consent, there is a violation regardless of intent, knowledge, or other factors.
(a) Creation, distribution, or exploitation of an individual's likeness in a digital replica for commercial purposes requires consent from the individual for such use. (b) Absence of compensation to an individual for the use of his or her likeness shall not negate the requirements of consent under this article. (f) Liability under this article shall only depend on whether or not an individual consented to the use of his or her likeness in a digital replica.
Pending 2026-07-01
CP-02.4
O.C.G.A. § 10-1-973(d)
Plain Language
Once an entity receives notice that an individual did not consent to a digital replica using their likeness, the entity must stop distributing or making the digital replica available. Continued knowing distribution after notice constitutes a violation. This is a notice-and-takedown obligation — liability for distribution does not require knowledge prior to receiving notice, but knowing distribution after notice creates an independent violation. This is separately actionable from the initial creation or exploitation violation in § 10-1-973(a).
(d) After receiving notice that an individual did not consent for the use of a digital replica, any entity that knowingly distributes or continues to make available such digital replica shall be in violation of this article.
Pending 2027-01-01
CP-02.4
O.C.G.A. § 10-1-971(a)-(b)
Plain Language
No individual or production company may publish, distribute, transmit, or otherwise make available to the public a digital replica of a performer without that performer's written consent. The prohibition also extends to distributing products or services that are primarily designed to produce unconsented digital replicas of specifically identified performers and that have only limited commercially significant purpose beyond that function. Consent must be affirmative, express, and specific to the allowance, extent, purpose, and duration of use — general terms of service or silence do not qualify. Standard sampling, remixing, and digital remastering authorized by the copyright holder are carved out from the digital replica definition.
(a) Any individual or production company that engages in an activity prohibited in subsection (b) of this Code section shall be liable in a civil action brought under this Code section. (b) The following activities shall be prohibited pursuant to this article: (1) The publication, display, distribution, transmission, or communication of, or otherwise making available to the public a digital replica of a performer without his or her consent; or (2) Distributing, importing, transmitting, or otherwise making available to the public a product or service that: (A) Is primarily designed to produce one or more digital replicas of a specifically identified performer or performers without the consent of such performer or performers; and (B) Has only limited commercially significant purpose or use other than to produce a digital replica of a specifically identified performer or performers without the consent of such performer or performers.
Pending 2027-01-01
CP-02.4
O.C.G.A. § 10-1-972(3)
Plain Language
Production companies must obtain a compliant consent contract under § 10-1-971(c) before using any digital replica of a performer. This is a production-company-specific restatement and reinforcement of the consent requirement — it makes clear that the consent contract obligation applies as a precondition to production use, not just to publication or distribution. The contract must meet all requirements of § 10-1-971(c), including the ten-year maximum, fair compensation, and specificity requirements.
Any production company deploying artificial intelligence systems for use in production in this state shall: (3) Obtain a contract pursuant to subsection (c) of Code Section 10-1-971 prior to the use of a digital replica of a performer.
Pending 2025-07-01
CP-02.4
§ 554J.3(2)
Plain Language
Deployers may not make publicly available any chatbot knowingly designed to impersonate a real person — living or dead — without first obtaining permission from the individual (or their legal representative) if living, or from the person responsible for the estate if deceased. A narrow exception applies for deceased individuals with no responsible estate: the chatbot may be deployed without permission if it was designed solely as an educational or research tool, or if a reasonable person would believe the chatbot has objective artistic, cultural, or political value. This functions as a digital likeness consent requirement applied to AI chatbots, covering both living and post-mortem rights.
2. A deployer shall not make a chatbot publicly available if the chatbot was knowingly designed to impersonate a real individual, regardless of whether the individual is living or deceased, unless the deployer first obtains permission to impersonate the individual from any of the following: a. For a living individual, from the individual or the individual's legal representative. b. For a deceased individual, from the person responsible for the deceased individual's estate. If no person is responsible for the deceased individual's estate, a deployer may make a chatbot that was designed to knowingly impersonate a deceased individual publicly available without permission if the chatbot was designed solely as an educational or research tool or if a reasonable person would believe the chatbot has objective artistic, cultural, or political value.
Pending
Gen. Bus. Law § 390-f(2)
Plain Language
Within 60 days of receiving notice from a public officeholder or candidate (or their authorized representative) that the person does not want realistic depictions of themselves generated, the owner, licensee, or operator of a covered generative AI system must implement a reasonable method to prevent users from creating such depictions. A method is 'reasonable' if it is consistent with industry standards, not overly burdensome on the system, cost-effective to implement and maintain, and up to date. This obligation is triggered only upon receipt of notice — there is no proactive obligation to prevent depictions of all public officials absent notice. Safe harbor: The operator is not liable if a reasonable method was implemented but was unable to prevent the depictions, nor for depictions that are incidental or created in an unforeseeable way (per § 390-f(5)).
2. The owner, licensee or operator of a visual or audio generative artificial intelligence system shall implement a reasonable method to prohibit its users from creating unauthorized realistic depictions of a covered person within sixty days of being notified by such covered person that such covered person does not want a realistic depiction of themselves to be generated by the owner, licensee or operator's system. An implemented method to prevent the unauthorized creation of realistic depictions of a covered person shall be considered reasonable when the owner, licensee or operator of the covered system has implemented a method that, in relation to the method of user inputs used by the covered system, is consistent with industry standards, not overly burdensome on the system, cost-effective to implement and maintain and is up to date.
Pending
Gen. Bus. Law § 390-f(3)
Plain Language
Operators must provide an accessible notice mechanism through which public officeholders and candidates can request that realistic depictions of themselves not be generated. The mechanism must be easy to access, understand, complete, and send, and must provide clear, timely status updates to the sender. Operators may require reasonable identification to verify and process requests. This is a standalone procedural obligation — even before any depiction is generated, operators must have this intake mechanism in place.
3. The owner, licensee or operator of a covered system shall implement a reasonable method for covered persons to send notice to them under this section provided that such method is easy to access, understand, complete and send and that such method provides clear updates to the sender on the status of their request in a timely manner. The owner, licensee or operator of a covered system may request a reasonable means of identification to process such requests.
Pending
Gen. Bus. Law § 390-f(4)
Plain Language
Operators may optionally implement safeguards allowing the covered person (or their authorized agent) to continue using the system to generate their own likeness, even after submitting an opt-out notice. However, if those safeguards are not reasonable — meaning they are not consistent with industry standards, overly burdensome, not cost-effective, or not up to date — the operator is liable as though they had failed to implement the opt-out method entirely. This is a permissive carve-out with a conditional liability hook, not a standalone affirmative obligation. It creates no new compliance duty but puts operators on notice that implementing an authorized-use exception carries the same reasonableness standard as the core opt-out obligation.
4. Nothing in this section shall prohibit the owner, licensee or operator of a covered system from implementing reasonable safeguards to permit the covered person, their agent, employee or representative to use such covered system to generate realistic depictions of such covered person, provided however that such owner, licensee or operator of such covered system shall be liable in the same manner as if they had violated subdivision two of this section where such safeguards are not reasonable. A safeguard is considered reasonable for purposes of this subdivision where the owner, licensee or operator of a covered system implements measures that are consistent with industry standards, not overly burdensome on the system, cost-effective to implement and maintain and are up to date.