AI Deepfake Law: Election Rules, Consent, and Platform Risk

A video posted to Weibo racked up 90 million views. In it, an elderly woman was deceived by an AI-generated avatar of her deceased son, convincing enough that she believed, at least for a moment, that he was still alive. That single clip did more to accelerate China's AI avatar regulations than years of policy debate. And on April 3, 2026, the Cyberspace Administration of China dropped its draft rules for AI-generated virtual humans, a document that doesn't just address deepfake abuse. It fundamentally reframes what the legal risk actually is.

The question regulators are now asking isn't whether your AI avatar looks real. They don't particularly care how good the model is. What they want to see is a consent record, a documented chain of evidence proving that the real human whose face, voice, or likeness was used actually said yes. For investigators, compliance teams, and anyone working in identity verification, this is the shift that matters. The technical bottleneck in deepfake cases has moved. It used to be detection. Now it's documentation.

From Fake Detection to China AI Avatar Consent

Here's what the draft rules actually say, stripped of bureaucratic language: you cannot create a digital human using another person's personal information, face, voice, biometric data, any of it, without their explicit consent. Not implied consent. Not assumed consent because someone posted a photo publicly. Explicit, documented, separately obtained consent. Biometric Update reports that the draft specifically classifies biometric data as sensitive personal information, which under China's Personal Information Protection Law requires its own separate consent layer, not bundled into a terms-of-service checkbox somewhere.

That's a meaningful legal distinction. Biometric data isn't just "personal information" with a slightly different label, it's a protected category requiring affirmative, standalone authorization. If you trained an avatar on someone's face without obtaining that specific consent, you're not in a gray area. You're in violation. Full stop. This article is part of a series, start with India Biometric App Cancellation Trust Adoption Backlash.

And the enforcement isn't hypothetical. A Shanghai CAC investigation, cited in legal analysis by the International Comparative Legal Guidesfound that a website had cloned individuals' voiceprints and provided voice synthesis services without consent. The action resulted in enforcement under both privacy law and deepfake regulations simultaneously. Two frameworks, one case. The lesson for compliance teams is that these rules don't operate in isolation, they stack.

AI Deepfake Laws Shape The Compliance Trap Nobody Sees

Deepfake Legislation Beyond China's Borders

China isn't writing deepfake legislation in a vacuum. Every major economy is drafting some version of the same act, and the common thread across each act is a demand for proof of consent rather than proof of technical fakery. Deepfake legislation moving through the EU, the UK, and several US states borrows the same core idea China formalized first: the law cares less about how convincing the fake looks and more about whether a real person agreed to it. Businesses operating across borders should expect a patchwork of deepfake legislation to converge on that same consent standard within a few years.

Election Deepfake Rules Are a Preview

Long before this consent-first act, most public attention on deepfake law focused on the election deepfake problem, synthetic video or audio of candidates saying things they never said. Election deepfake rules already required disclosure or removal in several jurisdictions, and they trained regulators to think about deepfakes as a documentation and disclosure issue rather than a purely technical one. China's avatar rules extend that same election deepfake logic to commercial and personal likenesses, not just political speech.

Platform Liability Under the New Framework

Platform liability is the piece most compliance teams underestimate. Under China's draft law, the platform hosting an AI avatar can share responsibility if it fails to verify that consent documentation exists before publishing synthetic content. That platform liability standard mirrors debates happening in US state legislatures, where lawmakers are asking whether hosting sites, not just the creators of deepfakes, should carry legal exposure for content moderation failures.

Deepfake Bills Moving Through State Legislatures

Dozens of deepfake bills have already passed or advanced in US state legislatures, and most of them share the same consent-and-disclosure spine found in China's draft law. These deepfake bills vary in scope, some target election content, others target sexual deepfake material or commercial impersonation, but nearly all of them make consent, or the lack of it, the central legal question. Tracking these deepfake bills state by state is becoming a real compliance job in its own right.

State Laws Are Filling the Federal Gap

Without a single comprehensive federal law on AI deepfakes, state laws have become the primary source of enforceable deepfake law in the US. State laws differ on fines, definitions, and what counts as a deepfake, which creates real complications for any company operating nationally. A business that treats one state's deepfake law as the national standard risks discovering, the hard way, that a neighboring state's law imposes very different consent and disclosure requirements.

Nonconsensual Intimate Imagery Gets Its Own Category

Nonconsensual intimate imagery generated by AI sits in its own legal lane inside most state and federal law proposals, separate from election or commercial deepfake rules. Lawmakers treat this category with the least tolerance for ambiguity, because publish non-consensual intimate imagery online cases involve direct, personal harm to a named victim rather than a diffuse public harm like election confusion. Several state laws now criminalize both creating and distributing this material, and some make even requesting AI-generated intimate images from a service provider a separate offense. The result is that ai-generated deepfakes of this kind face the harshest and fastest-moving enforcement of any category discussed here.

Federal Law Momentum Is Building Slowly

A federal law addressing nonconsensual intimate imagery has more political support than a broad federal law covering every deepfake category at once, which is why narrower bills tend to move faster through Congress. President Trump signed legislation in this narrower category, giving federal law its first real foothold on deepfake harms even though a comprehensive federal law for election and commercial deepfakes still doesn't exist. Federal law in this specific lane now gives prosecutors a nationwide tool instead of relying entirely on state ai deepfake legislation that varies by jurisdiction.

Why Deepfakes Draw Different Rules Than Ordinary Media

Deepfakes get treated differently than ordinary edited photos or satire because the underlying deepfake technology is built to be convincing enough that a viewer can't tell, from the media alone, that consent is now illegal to skip. Ordinary media, even manipulated media, usually doesn't attempt to pass as an authentic recording of a real, identifiable person doing or saying something they never did. That distinction, passing off synthetic media as authentic, is what separates a deepfake law violation from garden-variety editing or parody protected under other rules.

The fine range, 10,000 to 200,000 yuan ($1,460 to $29,300), sounds manageable until you read the operational requirements attached to it. According to TechJuice, if consent is withdrawn after an avatar has been created, providers are legally required to erase all source material and deregister the avatar entirely. This isn't a one-time authorization situation. Consent is an ongoing obligation, and its revocation triggers an irreversible compliance action.

Think about what that means operationally. A company builds a customer service avatar using a real person's likeness. Eighteen months in, that person revokes consent. The company must now delete the training data, retire the avatar, and document that it did so. Every iteration, every refinement, every cached version of the model potentially needs to go. That's not a compliance checkbox, that's a workflow redesign.

"The draft regulations explicitly extend consent requirements to the use of sensitive personal information in digital-human modeling, image generation, and scene construction, meaning the consent obligation attaches not just to the final product, but to every stage of the creation process." Analysis of China's layered consent architecture, China Meta Guide

Read that slowly. Consent doesn't just cover the finished avatar, it covers modeling, image generation, and scene construction. Which means if your avatar development process involves iterative testing, feedback loops, and model refinement (and of course it does), each of those stages theoretically falls under the consent umbrella. Legal teams are going to have heated arguments about how narrowly or broadly to interpret this language. Startups will try to interpret narrowly. Regulators, when it matters, will interpret broadly.

What This Means for Fraud Investigators

Here's where it gets genuinely interesting for identity professionals. Suppose an investigator uncovers a fraudulent AI avatar, say, a synthetic face used to deceive victims in a financial scam. Under the new framework, the absence of a consent record isn't just evidence that the avatar was unauthorized. It's the primary liability artifact in the case. The fraudster didn't have consent. That's provable. That's prosecutable under the draft rules, not just under general fraud statutes. Previously in this series: 1 In 3 Workers Want Biometric Badges Their Employers Arent R.

But here's the flip side that nobody's quite addressing yet: if a legitimate business built an avatar and kept sloppy consent records, an investigator reviewing that avatar can't distinguish between "no consent was ever obtained" and "consent was obtained but not documented." The avatar looks the same either way. The face-matching capability, confirming that the avatar corresponds to a real, identifiable person, tells you who was used. But only the consent trail tells you whether it was legal. Facial comparison tools can establish the identity link; they can't manufacture the paper trail that determines whether that link was authorized.

This is the operational inflection point. The technical question ("Is this a real person's face?") gets answered by matching technology. The legal question ("Did this person agree to this?") gets answered by compliance infrastructure. Those are two different problems, requiring two different systems, and most organizations have only built one of them.

Look, nobody's saying this is simple. The draft rules create real friction for legitimate use cases, customer service avatars, public figures authorizing promotional content, streamlined onboarding in e-commerce. China's AI avatar market exploded precisely because the technology lowered costs and expanded access. Regulating consent at this level of granularity will slow that down. Some of the friction is intentional. The 90-million-view Weibo video wasn't an edge case, it was a preview of where abuse was heading if no guardrails were set.

The Standard That's Coming for Everyone

China's public comment period runs through May 6, 2026. These are draft rules, not final law. Adjustments are likely, particularly around the iterative consent question, which compliance teams have already flagged as unworkable at scale. But the direction is set. Consent documentation is the metric regulators have landed on, and that won't change in revision. What will change are the operational specifics: how granular the documentation needs to be, what constitutes valid ongoing authorization, whether a single consent record covers downstream model refinements. Up next: India Tried 6 Times To Force A Biometric App On Your Phone A.

The broader pattern is clear when you zoom out. Ondato's analysis of global deepfake law frameworks shows that every major jurisdiction converging on this issue is landing in the same place: the question of whether an AI-generated likeness is legal turns not on its technical properties, but on the existence and adequacy of authorization records. The EU is heading there. The UK is heading there. New York and California are already there in draft form. China just published the most detailed version of what "there" actually looks like operationally.

For investigators and identity professionals, the practical implication is straightforward: build for both. Matching capability tells you what face was used. Consent infrastructure tells you whether using it was legal. The forensic question and the compliance question are now inseparable, and neither one answers the other.

The elderly woman on Weibo eventually realized the avatar wasn't her son. Ninety million people watched that moment. The question isn't whether China's regulators overreacted. The question is whether your consent records are solid enough that when an investigator comes looking, they find documentation, not a gap where authorization should have been.

Any discussion of an ai deepfake law has to start with what the law is actually trying to fix. The content people worry about most is content built from a real person's face or voice without permission, then distributed as though it were genuine. Deepfake policy in most jurisdictions now treats that kind of content the same way it treats identity theft, the harm comes from the deception, not from the technology used to create it. That framing is why consent, not detection accuracy, keeps showing up as the deciding factor in enforcement.

Federal law in the United States still lags behind what China and several US states have already put on paper. There is no single comprehensive federal law governing AI deepfake content nationwide, which means state law and state laws carry most of the practical weight for now. Companies building or hosting synthetic media content should not assume a future federal law will simply harmonize every state law into one clean standard; it may take years, and the interim patchwork is the actual operating environment.

Sexual deepfake content is one of the most aggressively regulated categories, and for good reason, it causes direct, personal harm to real people whose likeness was used without agreement. Deepfake pornography content built from a real person's face, without consent, is now explicitly criminalized in a growing number of state laws, and several of those state laws impose both civil and criminal penalties. A crime charge under these statutes typically does not require proving the content was distributed for profit, creation and non-consensual distribution alone can be enough.

Media literacy is part of the practical response too, since no law fully closes the gap between what content looks real and what content actually is real. Newsrooms, platforms, and everyday readers increasingly rely on provenance signals in media rather than visual inspection alone. Synthetic media detection tools help flag likely fakes, but as this article's own reporting shows, detection is no longer the central legal question, documentation of consent is.

Deepfake laws targeting commercial use, like China's avatar rules, sit alongside deepfake laws aimed at political and sexual content, and the three categories often get treated separately even within the same act. A single act rarely covers all three at once, which is part of why deepfake bills keep multiplying instead of consolidating into one omnibus law. Businesses tracking compliance risk need to check all three categories separately rather than assuming one law covers the field.

Platform liability also touches media hosting more broadly, not just avatar generation tools. A platform that hosts deepfake pornography or sexual deepfake material without a takedown process can face the same kind of shared liability that China's draft law assigns to platforms hosting unconsented avatars. Several state laws already require platforms to remove flagged non-consensual content within a set window once notified, mirroring notice-and-takedown regimes used for copyright.

For companies building consent infrastructure now, the practical checklist looks similar across every deepfake law and every draft act reviewed here: get explicit, separately documented consent before creating content from a real person's likeness; keep timestamped records, not verbal agreements; build a process to honor consent withdrawal that includes deleting source material; and treat platform liability as a real cost center, not a hypothetical one. None of that requires waiting for a final federal law, the state laws and draft rules already in force are enough to act on today.

State AI deepfake legislation is also starting to address political advertising directly, requiring a disclosure label whenever a campaign uses synthetic audio or video of a candidate close to an election. This overlaps with election deepfake rules already discussed above, but the political advertising angle adds a labeling requirement that goes beyond simple removal. A political ad using an undisclosed deepfake can trigger penalties even if the underlying claim in the ad is otherwise legal, because the violation is the missing disclosure, not the message itself.

Media outlets covering elections have started building their own internal verification steps before running user-submitted video, treating unverified political media the way they'd treat an anonymous tip. That extra layer of media scrutiny exists because a single viral deepfake, published even briefly, can shape a news cycle before any correction catches up. Several newsroom guidelines now explicitly reference deepfake technology risk as a reason to slow down publication of unverified political clips.

Elections remain the clearest example of why speed and documentation now matter more than raw detection accuracy. A deepfake released the weekend before an election doesn't need to fool everyone, it only needs to spread faster than a correction can. That timing pressure is part of why several election deepfake rules require rapid takedown rather than after-the-fact fines, since a fine paid months later does nothing to undo damage done during a live campaign.