{"id":1511,"date":"2026-06-15T10:06:28","date_gmt":"2026-06-15T10:06:28","guid":{"rendered":"https:\/\/inferno-digital.com.ua\/?p=1511"},"modified":"2026-06-15T10:06:28","modified_gmt":"2026-06-15T10:06:28","slug":"deepfake-is-a-violation-of-the-right-to-use-someone-elses-image-without-consent","status":"publish","type":"post","link":"https:\/\/inferno-digital.com.ua\/en\/deepfake-is-a-violation-of-the-right-to-use-someone-elses-image-without-consent\/","title":{"rendered":"Deepfake and liability for using someone else&#039;s image without consent"},"content":{"rendered":"<p><span style=\"font-weight: 500;\">In March 2022, a video appeared on social media purporting to show Ukrainian President Volodymyr Zelensky calling on Ukrainian soldiers to lay down their arms. This fake garnered millions of views in a matter of hours before it became clear that it was a \u201cdeepfake.\u201d But this attack affected more than just heads of state: every year, millions of ordinary people \u2013 entrepreneurs, bloggers, teachers, students \u2013 find that their faces appear in videos or photos they never took. According to the DeepStrike service, the number of generated deepfakes increased from 500,000 to eight million between 2023 and 2025. The technology, which was only used by film studios five years ago, is now available for free to anyone with a laptop. And it can destroy your reputation, career, or personal life \u2013 yours or that of someone close to you \u2013 for free.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">What is deepfake: technical and legal aspects<\/span><\/i><\/h2>\n<p><span style=\"font-weight: 500;\">Most people understand deepfake intuitively: \u201cfake video.\u201d However, in the context of legal protection, it is important to understand more precisely what exactly we are dealing with, because both the qualification of the offense and the construction of a legal protection strategy depend on it.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">How deepfake technology works<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Deepfake is content (video, audio, photos, or a combination thereof) created or modified using generative neural networks (AI systems that learn from large data sets and generate new content). The most common technique is face swapping. The algorithm analyzes photos of a real person and then overlays their features onto a video with another person so that the result is perceived by the viewer as real. In parallel, voice synthesis is developing - voice cloning based on a recording allows you to generate any audio on behalf of a specific person.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">A key point for understanding legal protection: creating a deepfake does not require the consent of a person, nor even direct communication with them. All that is needed is a few dozen public photos and an accessible online service.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Types of deepfake content: video, audio, photo, text<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Depending on the technical method of implementation, there are four main types:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Video deepfake \u2013 replacing a face or entire figure in a video. The most common and dangerous format. Used for disinformation, blackmail, pseudo-advertising.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Audio deepfake \u2013 a synthesized voice of a real person. Used for telephone fraud (e.g., a call from the director), extortion, and targeted manipulation.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">A deepfake photo is a static image with altered features or a face placed in a new context.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">Each type can be an independent offense or part of a complex manipulation. They are often combined: a fake video is supplemented with fake quotes and distributed via social networks.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">The difference between deepfake and regular photomontage<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Traditional photomontage is obvious: unnatural lighting, noticeable edges, quality discrepancies. Deepfake reproduces facial details, micromovements, and voice features \u2013 and therefore is perceived as real. It is this plausibility that decisively affects the legal qualification: if a regular montage can be perceived as obvious hyperbole or humor, then a realistic deepfake misleads the audience, which automatically increases the degree of harm caused.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">In addition, the quality of deepfakes is constantly improving: if in 2019\u20132020 they could be detected by blinking eyes or unnatural movements, then in 2025\u20132026 some videos are practically indistinguishable from the real ones even when viewed carefully.\u00a0<\/span><\/p>\n<p><b>Importantly.<\/b><span style=\"font-weight: 500;\"> Deepfake is not just a \u201cfake celebrity video.\u201d The threat exists for anyone who posts a photo or video online. All it takes is an open social media account.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">The right to one&#039;s own image in Ukrainian legislation<\/span><\/i><\/h2>\n<p><span style=\"font-weight: 500;\">Ukrainian legislation protects the image of an individual at several levels \u2013 from constitutional guarantees to special laws. Depending on the context, reference may be made to the Constitution of Ukraine, the Civil Code of Ukraine, the Law of Ukraine \u201cOn Protection of Personal Data\u201d.\u00a0<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Article 308 of the Civil Code: protection of the image of an individual<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Article 308 of the Civil Code of Ukraine is the basic norm of protection against unauthorized use of images. It states: a photograph, video, and any other image of an individual may be used only with their consent. The law provides for three exceptions to this rule:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">The person posed for payment, and the use of the image complies with the terms of the relevant contract.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">The image was taken at open public events (rallies, concerts, exhibitions), and the person is part of the general appearance of the crowd, not an isolated subject of the shooting.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">The person is a public figure and the image is used in a socially significant, not commercial or entertainment context.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 500;\">Deepfake generally falls under none of these exceptions: it places a person in a context they have never been in and creates the impression of events that never happened.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Article 307 of the Civil Code: protection of the right to privacy<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Article 307 of the Civil Code prohibits the collection, storage and dissemination of information about a person&#039;s private life without their consent. This applies to deepfake scenarios as follows: if a fake video depicts a person in an intimate setting, in a home environment or in situations related to their private or family life, not only the right to an image is violated, but also the right to privacy. The combination of the two grounds significantly strengthens the plaintiff&#039;s position in court.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Law &quot;On Personal Data Protection&quot;: biometric data<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Facial images are biometric personal data within the meaning of the Law of Ukraine \u201cOn Personal Data Protection\u201d. Any processing of such data (collection, storage, transfer, publication) requires the explicit consent of the person or a legal basis defined by law. Persons who collect photos for training a neural network or use other people&#039;s images in services for deepfake synthesis without permission violate the requirements of this law. The sanction is a fine of up to UAH 34,000 for individuals and up to UAH 170,000 for legal entities.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Constitutional right to honor, dignity and business reputation<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Article 28 of the Constitution of Ukraine guarantees everyone the right to respect for their dignity and prohibits any humiliation. Article 32 expressly prohibits the collection, storage and dissemination of confidential information about a person without their consent, and also guarantees the right to refute false information. These constitutional norms form the legal framework within which the entire mechanism of protection operates - from civil lawsuits to criminal proceedings.\u00a0<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">What actions with deepfake are considered a crime?<\/span><\/i><\/h2>\n<h3><i><span style=\"font-weight: 500;\">Creating a deepfake without the person&#039;s consent<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">The very fact of creating a deepfake with an image of a real person without their permission may be a violation of Art. 308 of the Civil Code. At the same time, there is an area of legal uncertainty: artistic satire and parody may be permissible if the content clearly does not claim to reflect real events, does not cause reputational damage, and does not mislead the audience about the actions of the person.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">But the line is thin. A deepfake, where a public figure \u201cspeaks out\u201d in support of a product, party, or idea, is no longer satire, but manipulation. If the goal is to make the audience laugh, the content is clearly fictitious and signed as a parody, the limits of liability are different from a situation where the goal is to mislead.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Spread of fake content on social media<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Responsibility lies not only with the author, but also with the one who spreads a deepfake, knowing that it is fictitious. Reposting, sharing, forwarding in messengers - all this can be qualified as intentional dissemination of false information. Ignorance of the fictitiousness of the content is a basis for reducing or excluding liability, but the court will assess whether the spreader had reason to doubt the authenticity of the material.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Using deepfake for commercial purposes<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">If someone else&#039;s image or voice is used for advertising, brand promotion, or any monetized content, this is a direct violation of Article 308 of the Civil Code and, at the same time, unfair competition in accordance with the Law &quot;On Protection against Unfair Competition.&quot; The amount of compensation here is higher: in addition to moral damage, illegally obtained commercial benefits are added, which the court may recover in favor of the plaintiff.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Sexually colored deepfake (deepfake porn)<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">The most serious type of violation. Placing a person in a sexual context without their consent is a gross violation of dignity, which can be classified as a set of criminal offenses - under Art. 182 of the Criminal Code of Ukraine (violation of privacy) and Art. 301 of the Criminal Code of Ukraine (distribution of pornographic materials). The maximum penalty is up to 3 years of imprisonment. If the victim is a minor, the liability increases significantly: up to 6 years of imprisonment under Art. 301-1 of the Criminal Code of Ukraine.<\/span><\/p>\n<p><b>Important detail:<\/b><span style=\"font-weight: 500;\"> Criminal liability arises not only for distribution, but also for storage and transfer of such content to third parties, even in private correspondence. Victims of deepfake porn, within the framework of criminal proceedings, have the right to compensation for moral damage, the amount of which in such cases is traditionally determined by courts to be above average.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Deepfake in political and information manipulation<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">In the conditions of a full-scale war, this category becomes especially dangerous. Fake video messages from commanders, fake statements from officials, fabricated information about the course of hostilities \u2014 all this can lead to criminal liability under Article 114-2 of the Criminal Code (dissemination of false information during martial law, up to 8 years of imprisonment), Article 111 of the Criminal Code (high treason), and in some cases, under the norms on sabotage.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">Types of liability for using someone else&#039;s image<\/span><\/i><\/h2>\n<h3><i><span style=\"font-weight: 500;\">Civil liability: compensation for moral damage<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">A civil lawsuit is the most common and flexible tool of protection. It allows you to obtain compensation regardless of whether a criminal offense is involved.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 500;\">Basic algorithm:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Establish the fact of the violation and record the evidence.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Identify the defendant: the deepfake author, the distributor, or the platform that refused a justified removal.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Draft a statement of claim with the following requirements: removal of content, public refutation, compensation for moral and material damage (if any).<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">File a lawsuit with the general court at the place of residence of the plaintiff or defendant.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 500;\">The amount of compensation for moral damage in Ukraine is determined by the court individually, based on the severity of the violation, the number of views of the fake content, the duration of its stay on the network and the real consequences for reputation, career and personal life. As a general rule, the amount of compensation is from 30,000 UAH. and higher, depending on the circumstances. The greater the audience reach and the longer the content was available, the higher the amount can be reasonably requested from the court.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">To substantiate the amount of moral damage, we recommend:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">record the number of views, likes and reposts;<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">save screenshots of comments confirming reputational damage;<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">obtain an opinion from a psychologist or psychiatrist regarding experiences and stress;<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Include testimonies from loved ones about changes in their attitude towards you.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">If the deepfake has led to real property losses (dismissal, termination of contract, reduction in income), it is advisable to demand compensation for property damage with documentary evidence.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Administrative liability: when applicable<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Administrative liability may arise in cases where the violation does not constitute a criminal offense, but is recorded and obvious. Basic norms:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Article 173-1 of the Code of Administrative Offenses \u2013 spreading false rumors that may cause panic among the population or disrupt public order: a fine of UAH 170 to 255 or correctional labor for a term of up to one month with a deduction of twenty percent of earnings.\u00a0<\/span><\/li>\n<\/ul>\n<h3><i><span style=\"font-weight: 500;\">Criminal liability: when deepfake becomes a crime<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Criminal prosecution is possible if one or more elements of the crime are present:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Article 182 of the Criminal Code \u2013 violation of privacy: fine up to UAH 17,000 or up to 3 years of imprisonment.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Article 190 of the Criminal Code \u2013 fraud using deepfake (for example, a call from a manager asking to transfer funds): fine up to UAH 51,000 or up to 3 years of imprisonment.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Article 129 of the Criminal Code \u2013 threat of murder or infliction of grievous bodily harm using deepfake: probationary supervision or restriction of liberty for up to two years.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Article 163 of the Criminal Code \u2013 violation of the secrecy of correspondence or private messages: fine up to 1700 UAH or up to 3 years of imprisonment.<\/span><\/li>\n<\/ul>\n<h3><span style=\"font-weight: 500;\">Comparative table of types of liability<\/span><\/h3>\n<table>\n<tbody>\n<tr>\n<td><span style=\"font-weight: 500;\">Type of violation<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Article<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Sanction<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Limitation period<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Publishing a deepfake without consent<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Article 308 of the Civil Code<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Compensation for damages, removal of content<\/span><\/td>\n<td><span style=\"font-weight: 500;\">3 years\u00a0<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Privacy violation<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Article 182 of the Criminal Code<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Fine up to 17,000 UAH or up to 3 years of imprisonment<\/span><\/td>\n<td><span style=\"font-weight: 500;\">3 years<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Unlawful processing of personal data<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Article 44-1 of the ZPD<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Fine up to 170,000 UAH<\/span><\/td>\n<td><span style=\"font-weight: 500;\">1 year\u00a0<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Deepfake fraud<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Article 190 of the Criminal Code<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Up to 12 years in prison<\/span><\/td>\n<td><span style=\"font-weight: 500;\">15 years\u00a0<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Threats through deepfake<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Article 129 of the Criminal Code<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Up to 5 years in prison<\/span><\/td>\n<td><span style=\"font-weight: 500;\">5 years<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Deepfake in wartime<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Article 114-2 of the Criminal Code<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Up to 8 years in prison<\/span><\/td>\n<td><span style=\"font-weight: 500;\">10 years<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Deepfake porn (adult)<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Art. 182, Art. 301 of the Criminal Code<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Up to 3 years in prison<\/span><\/td>\n<td><span style=\"font-weight: 500;\">3 years<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 500;\">Deepfake porn (underage)<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Art. 182, Art. 301-1 of the Criminal Code<\/span><\/td>\n<td><span style=\"font-weight: 500;\">Up to 10 years in prison<\/span><\/td>\n<td><span style=\"font-weight: 500;\">15 years<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><i><span style=\"font-weight: 500;\">What to do if your image was used in a deepfake<\/span><\/i><\/h2>\n<h3><i><span style=\"font-weight: 500;\">Step 1. Capture evidence: screenshots, specialist review, expert examination<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">First of all, you need to record the fact that the content existed before it was deleted. A standalone screenshot may be rejected as evidence by the court, as it can be easily forged. More reliable options:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Website review by a specialist \u2013 a specialist reviews the page in real time and creates a report indicating the URL, date, time, and content.\u00a0<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Police inspection report \u2013 if you contact law enforcement immediately, they will record the content themselves in a procedural manner.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Computer forensics \u2013 confirms the fact of forgery and establishes the metadata of the file, including the time and software used for generation.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">In parallel, store indirect evidence: messages from third parties with a link to the deepfake, saved copies of pages (web.archive.org), screenshots with visible timestamps and URLs.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Step 2. How to remove a fake video from the platform<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Most major platforms have a complaint mechanism for deepfake content:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Facebook\/Instagram: Report \u2192 This is misinformation or Report \u2192 Nudity\/sexual acts. Meta also has a separate form for reporting fake images of your face.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">TikTok: Report \u2192 Content spreading misinformation \u2192 Deepfake or altered media.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">YouTube: Report \u2192 Disinformation \u2192 Misleading content.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Telegram: complaint via @notoscam or direct contact with the channel administrators.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">At the same time, send a written request to the account owner to remove the content \u2014 by registered mail or email with delivery confirmation. This document confirms to the court that you have exhausted out-of-court settlement options.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Step 3. Contact the police and cyber police<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">If a deepfake contains signs of a criminal offense (threats, intimate content, fraud, disinformation) - contact the police or directly the Cyberpolice Department (cyberpolice.gov.ua).<\/span><\/p>\n<p><span style=\"font-weight: 500;\">The application must contain:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">your personal data and contacts;<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">description of the circumstances of the deepfake detection (when, where, under what conditions);<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">links to content or printed and certified evidence;<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">a specific description of the damage caused;<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">request to conduct a pre-trial investigation under the relevant articles of the Criminal Code.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">Cyber police are authorized to send official requests to platforms within the framework of international agreements \u2014 and to establish IP addresses and personal data of authors much more effectively than private individuals.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Step 4. Filing a civil lawsuit<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">The statement of claim to the court must contain:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Plaintiff: your full details and contacts.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Defendant: The author of the deepfake (if known) or the platform that received a reasoned request to remove the content and refused.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Subject of the lawsuit: violation of Articles 308, 307 of the Civil Code, the Law &quot;On Personal Data Protection&quot;.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Requirements: removal of content; public refutation; compensation for moral damages (specify the specific amount); compensation for property damage (if any); prohibition on using your image in the future.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Evidence: notarized inspection, forensic expert opinion, written requirements for the platform, eyewitness testimony.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">Court fee: 1% of the claim price, but not less than 0.2 and not more than 10 times the subsistence minimum.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Step 5. Appeal to the Commissioner for Human Rights and other bodies<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">If law enforcement agencies are inactive or the legal process is delayed, use additional levers:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">The Verkhovna Rada Commissioner for Human Rights (ombudsman.gov.ua) - in case of violation of constitutional rights and\/or inaction of state bodies.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Commissioner for Personal Data Protection (acts as part of the Ombudsman) - if the legislation on the processing of personal data is violated.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Antimonopoly Committee - in case of commercial use of the image in advertising or a business context.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">Example. In 2023, a Ukrainian businesswoman discovered a deepfake advertisement of her alleged &quot;partnership&quot; with an illegal online casino. A notarized protocol + an appeal to the cyber police allowed the author to be identified in 3 months. The court awarded 150,000 UAH in moral damages and ordered the advertisement to be removed from all platforms.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">How to identify the author of a deepfake<\/span><\/i><\/h2>\n<p><span style=\"font-weight: 500;\">Anonymity on the Internet is illusory. Even if the perpetrator hides behind a pseudonym, legal and technical tools allow their identity to be established.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Requests to social networks and hosting providers<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Through the court or within the framework of criminal proceedings, you can obtain from the platform the IP address, date of account registration, associated phone number or email. Procedure:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Submit a court order or investigator&#039;s resolution on temporary access to things and documents (Articles 159\u2013166 of the Criminal Procedure Code).<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Send a request to the platform through official law enforcement channels or a lawyer&#039;s request based on Article 24 of the Law of Ukraine &quot;On the Bar and Legal Activities&quot;.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Platforms are required to respond within the timeframes established by relevant agreements with law enforcement agencies.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 500;\">Meta, Google, and TikTok publish annual Transparency Reports with data on the fulfillment of requests from different countries. The level of fulfillment of requests from Ukraine has been steadily increasing since 2022.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Involvement of computer technical expertise<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">A forensic expert in the field of computer technology can:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">set video file metadata (date, time, software, geolocation);<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">identify characteristic traces of a particular generative service or model (for example, specific pixelation artifacts characteristic of certain platforms);<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">determine the primary source of distribution and chronology of publications;<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">to establish whether a specific person is the subject of a forgery, through comparative analysis with original materials.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">The approximate cost of a private examination is from 8,000 UAH. State (appointed by the investigator in criminal proceedings) is free of charge for the victim. The term for the performance of a private examination is from 2 to 6 weeks, depending on the complexity of the material. Please note: the list of forensic experts in the field of computer technologies can be found in the register of the Ministry of Justice of Ukraine.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">Global practice of regulating deepfake<\/span><\/i><\/h2>\n<p><span style=\"font-weight: 500;\">Ukraine is not alone in facing this problem. Understanding how other countries are addressing it is useful from both a practical and strategic perspective.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">USA: state laws against deepfake<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">There is currently no federal law against deepfakes in the US, but several states have passed their own legislation:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">California (AB 602, AB 730, 2019) \u2013 prohibits deepfakes in pornographic contexts and for the purpose of political influence on elections. AB 602 explicitly allows civil lawsuits against deepfake porn creators for damages of at least $150,000.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Texas (HB 4337, 2023) \u2013 criminalized deepfakes in election manipulation and certain types of financial fraud.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Virginia is one of the first states to criminalize the distribution of deepfake porn without a person&#039;s consent (up to 12 months in prison and a fine of up to $2,500).<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">At the federal level, the DEFIANCE Act (Disrupt Explicit Forged Images and Non-Consensual Edits Act) was actively discussed in 2024\u20132025, aimed at criminalizing sexual deepfakes nationwide. American experience shows that the absence of a federal law does not prevent effective protection if there is a will to enforce it and case law.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">EU: Digital Services Act and AI Act<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">The Digital Services Act (DSA), which comes into full force in 2024, obliges major platforms to label AI-generated content and remove it upon reasonable request. The AI Act (coming into force in stages from 2025\u20132026) establishes: mandatory labeling of synthetic content and a ban on systems that generate material with the aim of deception. Violations can result in fines of up to \u20ac35 million or up to 7% of annual turnover.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">For Ukraine, as a candidate for EU membership, these norms are a direct reference point for adapting its own legislation.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">United Kingdom: Online Safety Act 2023<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">The UK&#039;s Online Safety Act 2023 is one of the world&#039;s toughest regulations on deepfakes. It criminalises the distribution of sexual deepfakes without consent - even with the intention of distributing such content without actually distributing it. The penalty is an unlimited fine and\/or imprisonment for up to 2 years. Platforms that fail to remove content upon request face fines of up to 10% of annual turnover.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">Prospects of Ukrainian legislation<\/span><\/i><\/h2>\n<p><span style=\"font-weight: 500;\">As of April 2026, there is no separate law regulating deepfake in Ukraine. However, the Verkhovna Rada has registered several draft laws in the field of artificial intelligence regulation that directly address this topic.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">Bill No. 11264 \u201cOn the Principles of the Development of Artificial Intelligence in Ukraine\u201d passed its first reading in 2024. It provides for the labeling of AI-generated content and the liability of AI system developers for harm caused to third parties. Amendments to the Criminal Code regarding the direct criminalization of deepfake porn are at the stage of interdepartmental discussion.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">In parallel, as part of the adaptation to EU legislation, Ukraine is obliged to implement the Digital Services Act and AI Act as part of the membership agreement. This means that in the next 2\u20133 years, the legislative framework in the field of deepfake will change significantly - in particular, there will be requirements for mandatory labeling of synthetic content and direct penalties for platforms.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">Until a special law is adopted, protection is provided through the existing legal framework: the Civil Code, the Criminal Code, and the Law on Personal Data Protection. Case law confirms that this framework is generally sufficient for effective protection of rights, provided it is properly applied and provided with qualified legal support.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">How to protect yourself from the use of your image<\/span><\/i><\/h2>\n<p><span style=\"font-weight: 500;\">It is impossible to completely eliminate the risk, but it is possible to significantly reduce it today.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Privacy settings on social networks<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">Specific steps for major platforms:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Instagram: Settings \u2192 Privacy \u2192 Private account. Additionally: disable the ability for third parties to download your Stories, limit viewing of tags.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Facebook: Settings \u2192 Privacy \u2192 Who can see your posts: Friends only. Turn off facial recognition in your profile settings.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">TikTok: Settings \u2192 Privacy \u2192 Private Account. Turn off Duet and Stitching \u2013 they allow other users to use snippets of your videos.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">General advice: Avoid posting high-quality videos from different angles and with neutral backgrounds \u2014 this is the material that is most suitable for training a deepfake model. If you are a public figure or content creator, consider registering your own image as a copyrighted object \u2014 this is an additional legal tool for protection.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">Important. No technical solution provides 100% protection. The most effective weapon is a combination of caution in publications + prompt legal action when a violation is detected.<\/span><\/p>\n<h3><i><span style=\"font-weight: 500;\">Why you should watermark photos<\/span><\/i><\/h3>\n<p><span style=\"font-weight: 500;\">A visible watermark will not technically protect against deepfake, but it has two practical effects:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Evidential value: If a deepfake contains traces of your watermark or the removed watermark is visible in the metadata, this confirms that the image was yours and was used without permission.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Deterrence effect. Deepfakes are usually looking for \u201cclean\u201d images. A watermark increases their risk of being identified and can divert attention to easier targets.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 500;\">For additional protection, consider a steganographic watermark \u2013 a special code embedded directly into the image pixels and invisible to the eye but readable by software.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">Conclusions and recommendations<\/span><\/i><\/h2>\n<p><span style=\"font-weight: 500;\">Deepfake is not a threat of the future. It is already here, already being used against real people, and Ukrainian law already contains protection tools \u2013 even without a special law.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">The main thing to remember:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Your image is protected by law regardless of whether you are a public figure.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Any use of your image without consent is grounds for civil action, administrative or criminal liability of the violator.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">Anonymity on the Internet does not guarantee impunity: deepfake authors are identified and held accountable through requests to platforms and cyber police.<\/span><\/li>\n<li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 500;\">The most important thing is to capture evidence immediately, before deleting the content.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 500;\">At the same time, it is worth remembering about prevention: privacy settings on social networks, watermarks on photos, and caution in publications significantly reduce the risk of becoming a victim. But if this has already happened, the legal system has an answer for every level of violation: from a complaint to the platform to criminal charges and millions in compensation.<\/span><\/p>\n<p><span style=\"font-weight: 500;\">If you discover a deepfake with your image, don&#039;t delay. Contact a lawyer to protect your rights to your image and bring the perpetrators to justice. The sooner you start taking action, the better your chances are of identifying the author, preserving evidence, and receiving fair compensation.<\/span><\/p>\n<h2><i><span style=\"font-weight: 500;\">FAQ<\/span><\/i><\/h2>\n<h3><span style=\"font-weight: 500;\">Is it possible to make a deepfake of a public figure (meme, satire)?<\/span><\/h3>\n<p><span style=\"font-weight: 500;\">A satirical deepfake of a public figure may be permissible if it clearly does not claim to reflect real events, does not harm the reputation beyond the limits of permissible criticism, and is clearly labeled as a parody. But even then, the line is very thin. If a \u201csatirical\u201d deepfake contains defamatory statements, intimate subtext, or is used for commercial purposes, legal protection disappears regardless of genre framing.<\/span><\/p>\n<h3><span style=\"font-weight: 500;\">What to do if the deepfake was created by an anonymous person?<\/span><\/h3>\n<p><span style=\"font-weight: 500;\">Record the content in a notary public and immediately contact the cyber police. Law enforcement officers can send an official request to the platform to obtain the IP address and other account registration data. In parallel, you can file a civil lawsuit against an unidentified person \u2013 \u201cto the person to be identified\u201d \u2013 and after identification, clarify the requirements. This mechanism is directly provided for by procedural legislation. Remember that your actions can protect other persons from such abuses and contribute to the prompt identification of the offender.\u00a0<\/span><\/p>\n<h3><span style=\"font-weight: 500;\">How long does the legal process take in such cases?<\/span><\/h3>\n<p><span style=\"font-weight: 500;\">A civil case in the court of first instance usually takes from 3 to 12 months. Criminal proceedings take much longer \u2013 from 6 months to several years. Please note: civil and criminal proceedings can be conducted simultaneously \u2013 they do not exclude each other, but on the contrary, strengthen the position of the victim. The quality of the evidence collected at the start directly affects the timing.<\/span><\/p>\n<h3><span style=\"font-weight: 500;\">Can I claim compensation if the deepfake was quickly removed?<\/span><\/h3>\n<p><span style=\"font-weight: 500;\">Yes, and in full. The fact of removal does not eliminate liability: the violation occurred at the time of publication. For a successful claim, it is necessary to prove the fact of publication itself and the damage caused. This is why it is critical to record evidence before removal - with a notarized inspection or police report.<\/span><\/p>\n<h3><span style=\"font-weight: 500;\">How to protect a child from deepfake?<\/span><\/h3>\n<p><span style=\"font-weight: 500;\">First, limit the number of photos of your child in public access and set privacy on all social networks where there are children&#039;s images. Second, explain to your teenager that you should not share photos with strangers on the Internet, and generally respond to requests; check the content that the child distributes. Second, if a deepfake with a child&#039;s image has already been detected, immediately contact the police or immediately consult a lawyer about the algorithm of actions, as this is a criminal offense with severe sanctions (up to 10 years of imprisonment). Do not try to resolve this on your own or through negotiations with the offender.\u00a0<\/span><\/p>","protected":false},"excerpt":{"rendered":"<p>\u0423 \u0431\u0435\u0440\u0435\u0437\u043d\u0456 2022 \u0440\u043e\u043a\u0443 \u0443 \u0441\u043e\u0446\u0456\u0430\u043b\u044c\u043d\u0438\u0445 \u043c\u0435\u0440\u0435\u0436\u0430\u0445 \u0437&#8217;\u044f\u0432\u0438\u043b\u043e\u0441\u044f \u0432\u0456\u0434\u0435\u043e, \u0434\u0435 \u043d\u0456\u0431\u0438-\u0442\u043e \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442 \u0423\u043a\u0440\u0430\u0457\u043d\u0438 \u0412\u043e\u043b\u043e\u0434\u0438\u043c\u0438\u0440 \u0417\u0435\u043b\u0435\u043d\u0441\u044c\u043a\u0438\u0439 \u0437\u0430\u043a\u043b\u0438\u043a\u0430\u0432 \u0443\u043a\u0440\u0430\u0457\u043d\u0441\u044c\u043a\u0438\u0445 \u0432\u0456\u0439\u0441\u044c\u043a\u043e\u0432\u0438\u0445 \u0441\u043a\u043b\u0430\u0441\u0442\u0438 \u0437\u0431\u0440\u043e\u044e. \u0426\u0435\u0439 \u0444\u0435\u0439\u043a \u0437\u0456\u0431\u0440\u0430\u0432 \u043c\u0456\u043b\u044c\u0439\u043e\u043d\u0438 \u043f\u0435\u0440\u0435\u0433\u043b\u044f\u0434\u0456\u0432 \u0437\u0430 \u043b\u0456\u0447\u0435\u043d\u0456 \u0433\u043e\u0434\u0438\u043d\u0438, \u043f\u043e\u043a\u0438 \u043d\u0435 \u0441\u0442\u0430\u043b\u043e \u0437\u0440\u043e\u0437\u0443\u043c\u0456\u043b\u043e, \u0449\u043e \u0446\u0435 &#8211; \u201cdeepfake\u201d. \u0410\u043b\u0435 \u0446\u044f \u0430\u0442\u0430\u043a\u0430 \u0442\u043e\u0440\u043a\u043d\u0443\u043b\u0430\u0441\u044f \u043d\u0435 \u043b\u0438\u0448\u0435 \u0433\u043b\u0430\u0432 \u0434\u0435\u0440\u0436\u0430\u0432: \u0449\u043e\u0440\u043e\u043a\u0443 \u043c\u0456\u043b\u044c\u0439\u043e\u043d\u0438 \u0437\u0432\u0438\u0447\u0430\u0439\u043d\u0438\u0445 \u043b\u044e\u0434\u0435\u0439 &#8211; \u043f\u0456\u0434\u043f\u0440\u0438\u0454\u043c\u0446\u0456, \u0431\u043b\u043e\u0433\u0435\u0440\u0438, \u043f\u0435\u0434\u0430\u0433\u043e\u0433\u0438, \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u0438, \u0432\u0438\u044f\u0432\u043b\u044f\u044e\u0442\u044c, \u0449\u043e [&hellip;]<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1511","post","type-post","status-publish","format-standard","hentry","category-it-pravo"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/posts\/1511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/comments?post=1511"}],"version-history":[{"count":0,"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/posts\/1511\/revisions"}],"wp:attachment":[{"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/media?parent=1511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/categories?post=1511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/inferno-digital.com.ua\/en\/wp-json\/wp\/v2\/tags?post=1511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}