Synthetic media has moved fast. Tools that once required professional equipment and weeks of processing time now produce convincing fake video or audio in minutes, on a standard laptop, sometimes from a single photograph. The results range from harmless novelty to something far more damaging: fake intimate images, fabricated statements attributed to real people, and manipulated footage used to harass or defraud. Understanding what deepfake law UK 2026 actually covers, and where it still falls short, matters more than ever.
What the Law Currently Covers
The UK’s legal response to non-consensual deepfakes has developed through a patchwork of legislation rather than a single comprehensive statute. That patchwork has grown significantly in the past two years.
The Online Safety Act 2023 was the first major piece of legislation to target synthetic intimate imagery directly. It created a specific criminal offence for sharing deepfake pornography without consent, carrying an unlimited fine. Importantly, intent to cause distress no longer needs to be proven for sharing; the absence of consent is sufficient. Prosecutors had previously struggled to bring cases under older harassment or malicious communications laws because those required demonstrating deliberate harm.
Then came the Criminal Justice Bill amendments passed in 2024, which went a step further: creating a new offence for the creation of sexually explicit deepfakes, even if they are never shared. That was a meaningful shift. Prior to it, a person could fabricate intimate imagery of someone they knew, keep it on a device, and face no criminal sanction whatsoever, provided it never left their possession. The creation offence closed that particular gap.
Beyond intimate imagery, existing law still provides some protection. The Malicious Communications Act 1988 and the Communications Act 2003 can cover deepfakes used to harass. The Fraud Act 2006 applies where synthetic media is used to deceive someone for financial gain. Defamation law, governed by the Defamation Act 2013, remains relevant where a deepfake causes serious reputational harm, though civil defamation claims are expensive to pursue and legal aid is rarely available.
Where the Gaps Still Exist
Despite those advances, the current framework has real weaknesses. The law as it stands focuses heavily on intimate imagery. Deepfakes used for other purposes, such as fabricating political statements, manipulating job applicants, or generating fake testimonials from real people for commercial gain, sit in murkier legal territory.
There is also the question of enforcement. Identifying who created a synthetic image or video is technically challenging. Many tools are accessed through overseas platforms, and perpetrators can use anonymising technology. Even where a suspect is identified, building evidence to the criminal standard of proof remains difficult. The Internet Watch Foundation reported in 2025 that AI-generated child sexual abuse material had risen sharply year on year, illustrating both the scale of the problem and the limits of reactive enforcement.
Platform liability is another open question. The Online Safety Act places duties on platforms to remove illegal content, but proactive detection of synthetic media is far from perfect. Deepfake detection tools exist but are not foolproof, and platforms vary considerably in how seriously they implement their obligations. Ofcom, which regulates platform compliance under the Act, has powers to issue fines of up to £18 million or 10% of global turnover, but enforcement actions take time.
Consent and attribution in non-intimate contexts remain largely unaddressed by statute. If someone uses your voice, cloned from publicly available recordings, to record a fake interview or a commercial endorsement, the legal route is uncertain. You might pursue it through data protection law via the ICO, or through passing off under common law if it implies a commercial endorsement, but neither route is straightforward.
What the Health and Wellbeing Angle Looks Like
It is worth being direct about why this matters beyond the obvious. Non-consensual deepfakes cause serious psychological harm. Research cited by the mental health charity Mind consistently links online harassment and image-based abuse to anxiety, depression, post-traumatic stress, and in some cases suicidal ideation. The harm is not abstract. For victims, particularly women and younger adults who are disproportionately targeted, the damage to mental health can be lasting and severe.
That human cost is precisely why getting the legal framework right matters. Legislation that only partially covers the problem, or that exists on paper but is difficult to enforce, does not offer meaningful protection to the people most at risk.
Practical Steps You Can Take Right Now
If you believe you are a victim of a non-consensual deepfake, here is what is worth knowing in practical terms.
Report to the police. If the content is sexually explicit, it may constitute a criminal offence under the Online Safety Act. Keep records of everything: screenshots with timestamps, URLs, any messages you have received. Your local police force can refer cases to specialist units.
Contact the platform directly. All major platforms operating in the UK are subject to the Online Safety Act’s takedown duties. Report the content using the platform’s reporting mechanism. Follow up if nothing happens. Document your report.
Use specialist support organisations. The Revenge Porn Helpline (run by SWGfL) handles synthetic media cases and can assist with takedown requests across multiple platforms. Their service is free. Refuge and Galop also provide support where the content is part of a broader pattern of abuse.
Consider a data protection complaint. If identifiable personal data (including your image or voice) has been processed unlawfully, you can report to the ICO. This route is slower but can result in formal enforcement action against a platform.
Consult a solicitor. Civil routes, including injunctions and defamation claims, remain available. Some solicitors specialise in online abuse and may take cases on a conditional fee arrangement. The Law Society’s solicitor finder is a good starting point.
The Direction of Travel
The UK government has signalled further legislative work on synthetic media, particularly around electoral integrity and commercial fraud. The Law Commission has also been asked to review how existing defamation and privacy law handles AI-generated content. Progress is real but incremental.
Understanding deepfake law UK 2026 means accepting two things simultaneously: the framework is substantially stronger than it was three years ago, and it still leaves meaningful gaps for victims whose situation falls outside intimate imagery. Knowing where you stand, and what tools exist to help, is the most honest place to start.
Frequently Asked Questions
Is it illegal to create a deepfake of someone in the UK?
It depends on the content. Creating sexually explicit deepfakes of a real person without their consent is now a criminal offence in the UK following 2024 legislation. Creating non-intimate synthetic media, such as a fake speech or fabricated interview, is not automatically criminal, though it may attract liability under fraud, harassment, or defamation law depending on how it is used.
What can I do if someone has shared a deepfake image of me online?
Report it to the platform immediately using their reporting tools, as platforms regulated under the Online Safety Act have legal takedown duties. You should also report the matter to the police, particularly if the content is sexually explicit, and contact the Revenge Porn Helpline (run by SWGfL) which handles synthetic media cases and can assist with removals across multiple platforms free of charge.
Does UK law cover deepfakes used in fraud or financial scams?
Yes, the Fraud Act 2006 applies where synthetic media is used to deceive someone for financial gain, such as a fake video call impersonating a senior executive to authorise a bank transfer. These cases are increasingly common and are investigated by Action Fraud and specialist police units.
Can I take someone to court over a non-sexual deepfake that damaged my reputation?
Potentially, yes. The Defamation Act 2013 applies where false content causes serious reputational harm, and a deepfake fabricating statements attributed to you could meet that threshold. However, civil defamation claims are costly and legal aid is rarely available, so getting specialist legal advice first is strongly recommended.
What is Ofcom's role in regulating deepfake content on UK platforms?
Ofcom regulates platform compliance with the Online Safety Act 2023, which includes duties to remove illegal content such as non-consensual synthetic intimate imagery. Ofcom can issue fines of up to £18 million or 10% of global annual turnover for serious breaches, though formal enforcement proceedings typically take several months to conclude.