Sort and filter deepfake/non-consensual-imagery law status by country — the same research behind the Deepfake Law Map, in table form.
This tool provides general information, not legal advice.
This is a fast-moving legal area; several entries carry unresolved caveats in their penalty summary. See the Deepfake Law Map tool for the full per-entry sign-off status.
Last updated: September 22, 2026
Powered by Noticeora
| Penalty summary | Reporting authority | Source | ||
|---|---|---|---|---|
| Albania | No data yet | No reliable information found on a deepfake-specific NCII law — status unclear, needs dedicated research. | Not yet researched | Source |
| Andorra | No data yet | No reliable information found — status unclear, needs dedicated research. | Not yet researched | — |
| Australia | Criminal law | Criminalizes transmitting sexual material of an adult without consent via a carriage service, regardless of whether it's real, altered, or AI-generated — base offence up to 6 years; aggravated offence (offender also created/altered the material) up to 7 years. | Not yet researched | Source |
| Austria | No data yet | No dedicated criminal deepfake-NCII offense yet — only a general right-to-own-image civil remedy (UrhG § 78). In June 2026 the Nationalrat passed a resolution calling on the government to legislate criminal consequences for abusive/sexualized deepfakes. | Not yet researched | Source |
| Belarus | No data yet | No deepfake-specific law found; only general pornography-distribution offenses exist (up to 4 years), unrelated to deepfakes specifically. | Not yet researched | Source |
| Belgium | Criminal law | 6 months–5 years imprisonment for non-consensual distribution of sexual content (Art. 417/9); aggravated cases (e.g. profit motive) carry a fine plus 1–5 years. Whether this reaches wholly AI-generated (not merely edited) deepfakes is legally contested per Belgian commentary. | Not yet researched | Source |
| Bosnia and Herz. | No data yet | No general adult NCII-deepfake offense found; a 2025 Criminal Code amendment covers only AI-generated child sexual abuse material. | Not yet researched | Source |
| Bulgaria | No data yet | No reliable information found on a deepfake-specific NCII law — status unclear, needs dedicated research. Bulgaria is bound by the EU's June 2027 Directive (EU) 2024/1385 transposition deadline. | Not yet researched | Source |
| Canada | Criminal law | Redefines "intimate image" to expressly include AI/deepfake-generated depictions "likely to be mistaken for" a real recording. Distribution: up to 5 years; creation/possession-with-intent-to-share: up to 2 years; a new threat-to-distribute offence: up to 10 years on indictment. | Not yet researched | Source |
| Croatia | No known law | The existing article requires a breach-of-trust relationship between perpetrator and victim, which legal commentary says excludes most deepfake scenarios (e.g. a stranger). Bound by the EU's 2027 Directive 2024/1385 deadline. | Not yet researched | Source |
| Cyprus | Civil law | A general synthetic-media/personality-rights (copyright) law, not drafted specifically for non-consensual sexual imagery. Civil remedies (damages, injunctions) confirmed under Arts. 13/13A/13C; a criminal-sanctions clause (Art. 14) exists but specific penalties weren't found. | Not yet researched | Source |
| Czechia | Criminal law | Up to 2 years imprisonment for misusing someone's identity to produce/distribute pornography (effective Jan 1, 2026); aggravated forms (significant harm, organized group, financial gain, public distribution) up to 5 years. Exact act number not independently cross-verified. | Not yet researched | Source |
| Denmark | Criminal law | Extends the existing identity-misuse provision to also criminalize creating (not just sharing) deepfake-pornographic material — typically an 8,000 DKK fine for creation, 10,000 DKK for distribution, higher for aggravating circumstances. A separate Copyright Act amendment (still in process) would add a general civil personality right. The exact Straffeloven section number was not confirmed. | Not yet researched | Source |
| Estonia | No data yet | No dedicated law yet — Estonia's Social Democratic Party is pushing (as of 2026) to criminalize non-consensual sexual deepfakes; current law only ambiguously covers this via general identity-misuse/personal-data provisions. | Not yet researched | Source |
| Finland | Criminal law | Used to prosecute distribution of AI-generated non-consensual nude images — the first conviction (100 day-fines, roughly €10,000) was reported in January 2026. Reportedly covers distribution but not clearly the creation of such material for an adult victim. | Not yet researched | Source |
| France | Criminal law | Punishes bringing to the knowledge of the public — or even a single third party — any sexual content generated/altered via algorithmic processing depicting a real person without consent. Base penalty: 2 years and €60,000; up to 3 years and €75,000 if distributed via an online public communication service. The official Légifrance text was not directly re-confirmed this pass. | Not yet researched | Source |
| Germany | Legislation pending | No deepfake-specific criminal offence is currently in force. Existing StGB § 201a presupposes a real underlying image capture and likely does not clearly reach AI-generated content. A dedicated offence was proposed in 2024 but has not been enacted. | Not yet researched | Source |
| Greece | Criminal law | Art. 346 covers non-consensual sharing of intimate/manipulated material; Art. 337 covers distribution of fabricated sexual content, per legal commentary — not independently verified against the official Penal Code text. | Not yet researched | Source |
| Hungary | Criminal law | A general "false recording damaging honor" offense, not one specifically drafted for sexual/intimate deepfakes — whether it reaches sexual deepfake content is inferred by commentators, not explicit in the statute. Bound by the EU's 2027 Directive 2024/1385 deadline. | Not yet researched | Source |
| Iceland | No data yet | No reliable information found confirming an enacted, deepfake-specific criminal provision — status unclear, needs dedicated research. | Not yet researched | — |
| Ireland | Criminal law | Criminalizes recording/distribution/publication of intimate images without consent; its broad "intimate image" definition may cover deepfakes but this hasn't been definitively tested. A separate Protection of Voice and Image Bill 2025 (a standalone deepfake/likeness offense) is still pending as of early 2026. | Not yet researched | Source |
| Italy | Criminal law | 1 to 5 years imprisonment for non-consensual distribution of AI-falsified/altered images, videos, or voices capable of misleading about authenticity and causing unjust harm (effective Oct 10, 2025). Builds on the 2019 "Codice Rosso" revenge-porn law (Law 69/2019). | Not yet researched | Source |
| Kosovo | No data yet | No reliable information found — status unclear, needs dedicated research. | Not yet researched | — |
| Latvia | Criminal law | Up to 1 year imprisonment (or a lesser sanction) for distributing intimate materials — including AI-generated/deepfake content — without consent; up to 3 years if the victim is a minor. Effective April 16, 2026; Latvia's own Justice Ministry confirms this explicitly covers AI-generated material. | Not yet researched | Source |
| Liechtenstein | No data yet | No reliable information found — a government report responding to a parliamentary question on AI/deepfake misuse exists, but could not be confirmed to describe an enacted or pending law with penalties. | Not yet researched | — |
| Lithuania | Legislation pending | Passed an initial parliamentary vote (104-2-6) on Sept 15, 2026; proposes public works, fines, or up to 1 year imprisonment for creating/altering/distributing non-consensual sexual deepfakes (up to 2 years for content depicting sexual violence). A further vote is scheduled for Dec 2026. | Not yet researched | Source |
| Luxembourg | No data yet | Reported May 2026 as still "en cours de finalisation" (draft law) — would criminalize unsolicited sending of intimate material and non-consensual distribution of sexually explicit content, including AI-produced/modified material. Not yet enacted. | Not yet researched | Source |
| Macedonia | No data yet | No reliable information found — status unclear, needs dedicated research. | Not yet researched | — |
| Malta | No data yet | Existing law only covers sharing of real (not AI-generated) intimate content. The governing party pledged in its 2026 election manifesto to legislate against deepfake abuse, but nothing is enacted yet. | Not yet researched | Source |
| Moldova | No data yet | Academic legal research confirms Moldova's Criminal Code has no explicit provision criminalizing deepfake or other non-consensual intimate imagery. | Not yet researched | Source |
| Monaco | No data yet | No reliable information found confirming or ruling out a deepfake/NCII-specific provision — status unclear, needs dedicated research. | Not yet researched | — |
| Montenegro | Criminal law | Up to 3 years imprisonment if shared with multiple people; up to 8–10 years if the victim is a minor or the perpetrator a public official. Whether this explicitly extends to AI-generated (not just real) imagery is not confirmed. | Not yet researched | Source |
| Netherlands | Criminal law | Explicitly covers "manipulated and fabricated material." Creating a non-consensual sexual image (real or manipulated): up to 1 year or a 4th-category fine; publishing/disclosing one knowing it lacks consent: up to 2 years. | Not yet researched | Source |
| Norway | Legislation pending | Existing provisions cover "defamatory or clearly private" images, but a 2024 Storting research note found genuine uncertainty over whether § 267a (written for photographic images) reaches fully AI-generated content — a broader reform proposal is under discussion. | Not yet researched | Source |
| Poland | No data yet | Current Criminal Code only reaches deepfake porn incidentally via defamation/insult provisions. A Civic Coalition-proposed bill to specifically criminalize non-consensual AI-generated sexual deepfakes was reported in 2026 but not yet enacted. | Not yet researched | Source |
| Portugal | Civil law | Legal scholarship argues existing provisions may reach digitally-manipulated images, but no deepfake-specific statute or confirming case law was found. Portugal must transpose the EU's Directive 2024/1385 by June 2027. | Not yet researched | Source |
| Romania | No known law | Criminalizes non-consensual distribution of intimate images, but multiple sources confirm it covers only real/authentic images — Romania has no offense covering deepfake/digitally-fabricated intimate imagery, and an active public petition campaign is calling for one. | Not yet researched | Source |
| Russia | No data yet | No reliable information found — status unclear, needs dedicated research. | Not yet researched | — |
| San Marino | No known law | Up to 2 years imprisonment for unlawful distribution of sexually explicit images without consent (up to 6 years plus a €12,000 fine if by a spouse/ex-partner) — but this covers real images; no deepfake-specific amendment or confirmed judicial extension to synthetic images was found. | Not yet researched | Source |
| Serbia | No data yet | No standalone deepfake/revenge-porn offense — prosecutions rely on adjacent Criminal Code provisions (unauthorized recording/photographing/publication, sexual harassment). A 2024 Criminal Code amendment debate did not address this gap. | Not yet researched | Source |
| Slovakia | No data yet | A 2025 peer-reviewed legal analysis concludes existing law protects against deepfake child pornography but does not adequately cover adult non-consensual deepfakes. Two opposition parties have floated bills (~2026), neither enacted. | Not yet researched | Source |
| Slovenia | No data yet | No reliable information found — status unclear, needs dedicated research. | Not yet researched | — |
| Spain | Legislation pending | Congress approved processing the bill on Sept 10, 2025; not yet passed a final vote or published in the BOE as of the sources found. Proposes 1–2 years imprisonment for non-consensual distribution of sexual/seriously offensive deepfakes. A narrower existing provision (Art. 197.7, from a 2023 law) covers non-consensual sharing of real intimate images, but its application to AI-generated content is disputed. | Not yet researched | Source |
| Sweden | No data yet | Multiple academic sources confirm neither creation nor distribution of pornographic deepfakes is currently criminalized under the Brottsbalken (Criminal Code), partly due to freedom-of-expression protections. A July 2025 reform strengthened sexual-violation protections generally but did not address deepfakes. | Not yet researched | Source |
| Switzerland | No data yet | No dedicated offense — only partial, indirect coverage via general identity-fraud (Art. 179decies StGB), defamation, and pornography provisions. A Swiss lawyer is quoted stating existing norms "only partially cover the phenomenon." Civil remedy available via personality-rights protection (Civil Code Art. 28). | Not yet researched | Source |
| Turkey | No data yet | No dedicated deepfake law — addressed only indirectly through general Penal Code provisions (privacy violation, unlawful data dissemination, defamation, extortion). Turkish legal commentators note the law "has not yet explicitly defined the term deepfake." | Not yet researched | Source |
| Ukraine | Legislation pending | Passed first reading in the Verkhovna Rada (reported 2025); awaiting second reading as of the sources found. Would criminalize non-consensual distribution of intimate materials and creation of sexual content without consent, including deepfake/AI-generated content. | Not yet researched | Source |
| United Kingdom | Criminal law | Sharing/threatening-to-share offences: 6 months to 2 years depending on intent. Separately, creating (or requesting creation of) a non-consensual "purported intimate image" of an adult is now a summary offence, in force since Feb 2026. | Not yet researched | Source |
| Vatican | No data yet | No deepfake- or AI-sexual-imagery-specific criminal law exists. A general AI-ethics decree names deepfakes as an example of AI-enabled harm but sets no penalties; an unrelated 2013 penal-law reform addresses child sexual abuse offenses specifically. | Not yet researched | Source |
"Reporting authority" (which agency handles a report in each country) hasn't been researched yet for any entry — shown for reference, not yet populated. Legal status/penalty data is shared with the Deepfake Law Map tool and carries the same AI-assisted-research caveat — see that tool's page for details.