Kentucky Deepfake Laws: AI Images, Voice Cloning & Penalties (2026)

Kentucky has no deepfake-specific statute for nonconsensual intimate images of adults, but three overlapping laws create real legal exposure: KRS 531.120 criminalizes distributing private sexual images without consent, KRS 117.322 (enacted March 2025) creates a civil remedy for candidates targeted by AI-manipulated election media, and KRS 531.306 (2024) expressly eliminates the need to prove a real child existed when prosecuting AI-generated child sexual abuse material.

Information last verified on June 9, 2026. This article has not yet been reviewed by a licensed attorney.

Is It Illegal to Make a Deepfake of Someone in Kentucky?

It depends on the type of content and the intended use. Kentucky does not have a single law that says "deepfakes are illegal," but several statutes can reach deepfake conduct depending on the bucket.

For sexual content involving adults, KRS 531.120 is the closest state tool. It covers distribution of "private erotic matter" without the depicted person's written consent, with intent to profit or cause harm. The statute uses broad language that could cover realistic AI-generated images, but it was written in 2018 before generative AI was widespread and contains no express AI language. Courts have not yet interpreted whether a synthetic image qualifies as "private erotic matter" of a real person.

For children, Kentucky is explicit: KRS 531.306 eliminates the prosecution's burden of proving an actual minor was used, so AI-generated child sexual abuse material can be charged under the full Chapter 531 framework, which carries felony penalties up to Class B.

For political content, KRS 117.322 creates a narrower civil remedy focused on elections. It does not criminalize election deepfakes outright; it gives candidates the right to seek an injunction requiring a disclosure label, plus attorney fees.

What Kentucky does not cover: deepfakes of private individuals for harassment, satire, or commercial use unrelated to elections fall outside state law as of mid-2026. The federal TAKE IT DOWN Act and common law privacy torts fill some of that gap.

Sexual and Intimate Deepfakes

Kentucky's primary tool is KRS 531.120, which makes it a crime to intentionally distribute "private erotic matter" to a third party without the written consent of the person depicted, when done with intent to profit, harm, harass, intimidate, threaten, or coerce, and when the disclosure would cause a reasonable person to suffer harm.

The penalty structure is: Class A misdemeanor for a first offense, Class D felony for each subsequent offense. If the distribution is for profit or gain, the penalty rises to Class D felony for the first offense and Class C felony for each subsequent offense. Notably, KRS 531.120(6) provides that a conviction does not result in sex-offender registration.

The statute's weakness for deepfake victims is its language. "Private erotic matter" suggests imagery that originated as a private recording, not a synthetic creation. A person depicted in a realistic AI-generated sexual image was never privately recorded. Whether Kentucky courts would extend the statute to synthetic images has not been litigated.

KRS 531.125 (effective June 27, 2025) adds a related offense: sexual extortion. A person commits sexual extortion when they threaten to distribute sexual imagery or nudity of another person in order to coerce that person into producing more material, paying money, or engaging in sexual conduct. This reaches the sextortion use case where an AI-generated image is used as a threat, even if the image itself has not been distributed.

For minors, KRS 531.306 (effective July 15, 2024) is explicit and strong: in any prosecution under KRS 531.300 to 531.370 involving a computer-generated image of a minor, the Commonwealth is not required to prove the actual identity, age, or existence of the minor. This means a prosecutor can charge AI-generated child sexual abuse material without locating a real victim. The underlying offense, use of a minor in a sexual performance under KRS 531.310, is a Class C felony, rising to a Class B felony if the minor depicted is under 16.

Federal law adds a further layer. The federal TAKE IT DOWN Act (Public Law 119-12), signed May 19, 2025, created a federal crime for knowingly publishing nonconsensual intimate visual depictions of real adults, expressly including AI-generated "digital forgeries." The penalty is up to two years in federal prison (three years if the victim is a minor). Platforms have a 48-hour removal obligation once a victim submits a notice.

Election and Political Deepfakes

Kentucky enacted KRS 117.322, effective March 24, 2025, as part of 2025 Ky. Acts ch. 66. It is a civil statute, not a criminal one.

Any candidate for elected office whose appearance, action, or speech is altered through synthetic media in an electioneering communication may seek injunctive relief against the sponsor. The court can order the sponsor to add a clear and conspicuous disclosure. A prevailing party may also recover reasonable attorney fees.

The definition of "synthetic media" in KRS 117.001(20) is narrow: it covers audio or video recordings of an identifiable natural individual that have been intentionally manipulated using generative adversarial network techniques to create a realistic but false depiction without the person's consent and that produce a fundamentally different impression than the unaltered original. Still images are not covered.

"Electioneering communication" under KRS 117.001(8) reaches cable, internet, television, radio, electronic billboards, and phone calls to residences, distributed within 45 days before a primary or regular election. Bona fide news coverage is exempt.

It is an affirmative defense that the electioneering communication already includes a clear and conspicuous disclosure identifying the content as synthetic. This disclosure-as-defense structure makes KRS 117.322 a labeling law rather than an outright ban. Courts in other states have struck down broader election deepfake statutes on First Amendment grounds, and Kentucky's disclosure-focused approach is designed to reduce that risk.

AI Voice Cloning and Digital Likeness

Kentucky's right-of-publicity statute, KRS 391.170 (enacted 1984), recognizes that a person has property rights in their name and likeness. For public figures, commercial use of the name or likeness without written consent is prohibited for 50 years after death. However, the statute was written decades before voice cloning and AI digital replicas existed. It does not mention voice, does not extend to private individuals, and contains no AI-specific language.

In practice, this means Kentucky has no law specifically targeting unauthorized AI voice clones of living individuals. Common law misappropriation and right-of-privacy torts may provide some recourse, but statutory remedies are limited.

Tennessee's ELVIS Act (Tenn. Code Ann. 47-25-1101, effective July 1, 2024) is the national reference point for voice-clone legislation: it explicitly extends right-of-publicity protection to AI-simulated voices. Kentucky has not passed an equivalent law as of mid-2026.

The NO FAKES Act (S.1367, 119th Congress) would create a federal right of publicity covering unauthorized AI voice and likeness replicas. As of June 2026, it has not passed either chamber of Congress and is not law.

For commercial impersonation, the FTC Impersonation Rule (16 CFR Part 461), effective April 1, 2024, prohibits deceptive impersonation of government entities and businesses, including through AI voice cloning. The FCC has ruled that AI-generated voices in robocalls are "artificial" under the TCPA (FCC 24-17, February 2024), making AI voice-clone robocalls to personal phones without prior express consent illegal nationwide.

See Kentucky AI Laws for the broader framework on automated decision-making and AI governance requirements that apply in the state, which is distinct from the deepfake-specific rules covered here.

Federal Law That Applies in Kentucky

The TAKE IT DOWN Act (Public Law 119-12) is the most significant recent development for Kentuckians. Signed May 19, 2025, it is the first federal law to expressly criminalize nonconsensual intimate deepfakes of adults. It covers AI-generated "digital forgeries" alongside real images. Victims can submit a notice to platforms, which must then remove the content within 48 hours (compliance deadline: May 19, 2026). The FTC enforces platform obligations.

Federal child sexual abuse material law (18 U.S.C. 2256(8)(B)) has covered computer-generated images since the PROTECT Act of 2003: any digital or computer-generated image indistinguishable from a real minor in sexually explicit conduct is covered, with no First Amendment defense for indistinguishable material.

The DEFIANCE Act (S.1837, 119th Congress) is pending legislation only. It would create a federal civil cause of action with liquidated damages of $150,000 ($250,000 if the conduct involved actual or attempted sexual assault, stalking, or harassment) for victims of sexual deepfakes. The 118th Congress version passed the Senate in July 2024 but died in the House. The Senate passed the 119th Congress version (S.1837) by unanimous consent on January 13, 2026, but the bill remains pending in the House. Do not rely on it as existing law.

For a detailed breakdown of the DEFIANCE Act's current status, see our coverage at news/defiance-act-deepfake-porn-victims-right-to-sue.

What Victims Can Do

A Kentucky victim of an intimate deepfake has several avenues. First, file a report with local law enforcement citing KRS 531.120 if the image was distributed with intent to harm. If the image was used as a threat, KRS 531.125 (sexual extortion) may apply even if no distribution occurred.

Second, submit a removal notice to the platform under the TAKE IT DOWN Act. Platforms must act within 48 hours. The FTC administers complaints if a platform does not comply.

Third, consult a private attorney about civil claims. Kentucky does not currently have a statutory civil cause of action for adult NCII deepfakes, but common law privacy torts (intrusion, false light, appropriation) and intentional infliction of emotional distress claims may be available depending on the facts.

For deepfake content used in political communications, the targeted candidate may seek injunctive relief in the Circuit Court of the county where they reside under KRS 117.322. The burden is on the candidate to show synthetic media was used by clear and convincing evidence.

Penalties at a Glance

Disclaimer: This article provides general legal information about Kentucky deepfake and AI-generated image laws as of June 2026. It is not legal advice and does not create an attorney-client relationship. Laws in this area are changing rapidly. If you have been harmed by a deepfake or face related charges, consult a licensed Kentucky attorney.

More Kentucky Laws

• Kentucky AI Meeting Recording Laws
• Kentucky Alimony Laws
• Kentucky At-Will Employment Laws
• Kentucky Car Accident Laws
• Kentucky Car Seat Laws
• Kentucky Child Custody Laws
• Kentucky Child Support Laws
• Kentucky Common Law Marriage Laws
• Kentucky Data Privacy Laws
• Kentucky Divorce Laws
• Kentucky Dog Bite Laws
• Kentucky Emancipation Laws
• Kentucky Expungement Laws
• Kentucky Hit and Run Laws
• Kentucky Landlord-Tenant Laws
• Kentucky Lemon Laws

For the full 50-state comparison, see Deepfake and AI Voice Cloning Laws by State.