Creating Deepfakes Is Now a Crime

UK makes it illegal to create AI-generated intimate images without consent. Two years in prison.

TL;DR: As of the week of January 13, 2026, creating AI-generated intimate images of someone without their consent is a criminal offense in the UK. The law closes a gap: previously, only sharing such images was illegal. Now making them at all is a crime, with penalties up to 2 years in prison. The government is also going after "nudification apps" next. This matters because deepfake intimate image abuse has exploded, and the tools that enable it have gotten terrifyingly easy to use.

What Changed

The Data (Use and Access) Act (DUAA) came into force this week, making it a criminal offense to create or request the creation of a sexually explicit AI-generated image of a person without their consent [1].

Before this law: Only sharing or threatening to share deepfake intimate images was illegal (since January 2024 under the Online Safety Act amendments).

After this law: Creating them at all is now a crime. You don't have to distribute the images. The act of creation, or even requesting someone else create them, is itself the offense.

Penalties: Up to 2 years in custody [2].

Why This Matters Now

The timing isn't coincidental. In late 2025 and early 2026, several incidents pushed deepfake abuse into headlines:

  • Grok on X: Elon Musk's AI tool on X (formerly Twitter) was used to create sexualized deepfakes of public figures, prompting AI safety investigations [3].
  • School scandals: Cases in UK schools where students used AI tools to create fake intimate images of classmates made national news.
  • Celebrity targeting: High-profile women including Taylor Swift and others were targeted by AI-generated images, sparking public outrage.

The ease of access is the problem. A few years ago, creating convincing deepfakes required technical skills and expensive hardware. Now a teenager with a phone can do it in minutes. The tools got better. The barriers dropped. The abuse exploded.

Nudification Apps Are Next

The government has announced plans to go after "nudification apps": services specifically designed to transform clothed photos into fake nude images [4].

The Crime and Policing Bill will make it illegal for companies to provide tools designed to create non-consensual intimate images. This targets the infrastructure, not just the users.

Why this matters: Apps like these have been downloaded millions of times. They're advertised openly. Some charge subscription fees. It's an industry built on sexual harassment. The UK is saying the apps themselves, not just the people using them, bear responsibility.

Whether this actually puts a dent in the problem depends on enforcement. These apps operate globally. Hosting them overseas could evade UK jurisdiction. But it's a start.

UK Deepfake Legislation Timeline

  • January 2024: Sharing or threatening to share deepfake intimate images becomes illegal under Online Safety Act amendments [5].
  • January 2026: Creating deepfake intimate images becomes illegal under DUAA [1].
  • 2026 (Expected): Crime and Policing Bill to target nudification apps [4].

The UK has been methodically closing gaps. First sharing. Then creating. Now the tools themselves. Each law responds to a loophole exposed by technology that moves faster than legislation.

The Limitations

No law is a complete solution. Here's what this one doesn't fix:

  • Enforcement challenges: Proving who created an image, when, and whether consent existed is difficult. Investigations take time and resources.
  • Platform liability: The law targets creators, not the platforms where images spread. Platforms still benefit from engagement even on abusive content.
  • Global access: Anyone outside the UK can still create and potentially distribute these images. VPNs and international hosting complicate jurisdiction.
  • Detection: AI-generated images are getting harder to identify. By the time abuse is detected, images may have spread widely.
  • Cultural change: Laws punish behavior but don't prevent the mindset. People need to understand that creating these images, even "privately," is harm, not harmless.

How Other Countries Compare

The UK is ahead of most countries on this issue, but not alone:

  • United States: The TAKE IT DOWN Act passed in 2025, focusing on removal requirements. State laws vary widely. No federal law criminalizes creation specifically.
  • European Union: The AI Act and GDPR cover some aspects, but no explicit deepfake-specific criminal provisions yet.
  • South Korea: Strong laws against deepfake sexual content, with prison terms up to 5 years. Has prosecuted multiple cases.
  • Australia: Amended criminal code in 2025 to cover AI-generated intimate images, though enforcement is still developing.

The UK's approach is notable for criminalizing creation, not just distribution, and for explicitly targeting the tools themselves.

What You Can Do

If You're a Victim

  • Report to police: Creating these images is now a crime. File a report.
  • Report to platforms: Most have policies against non-consensual intimate imagery. Use them.
  • Preserve evidence: Screenshot the image and any context showing who shared it before it's deleted.
  • Contact Refuge or support organizations: StopNCII.org helps remove intimate images from platforms.

Protect Yourself

  • Limit photo availability: AI needs source photos to create deepfakes. Private accounts limit access.
  • Watermark shared images: Makes deepfakes slightly harder to create convincingly.
  • Request data deletion: Use GDPR rights to remove photos from services you no longer use.
  • Monitor your digital footprint: See our OSINT self-defense guide.

The Bottom Line

Creating AI-generated intimate images of someone without their consent is now a crime in the UK. The creation itself, not just sharing. Up to 2 years in prison.

This matters because the technology has outpaced the law for years. The abuse is real. It happens in schools. It happens to celebrities. It happens to ordinary people who find fake intimate images of themselves circulating without ever knowing who made them or why.

The UK is saying: making these images is harm. Not a gray area. Not "just" a privacy violation. A crime.

Whether enforcement catches up to the problem is another question. But the legal framework is now clear. If you create deepfake intimate images of someone without consent, you're a criminal. That's the message.

References

  1. UK Government: Creating Intimate Deepfakes Now a Criminal Offence (January 2026)
  2. Society for Computers and Law: UK Deepfake Intimate Image Legislation Analysis
  3. Parallel Parliament: Deepfake Intimate Images Parliamentary Debate
  4. VinciWorks: UK Criminalises Creating Deepfake Intimate Images (January 2026)
  5. HSF Kramer: Online Safety Act Intimate Image Provisions (2024)