Article-by-article breakdown
Pennsylvania Act 125 of 2024
Act of Oct. 1, 2024, P.L. 125, Amending Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes Regarding Nonconsensual Dissemination of Intimate Images and Child Sexual Abuse Material
18 Pa.C.S. § 3131 — Nonconsensual Dissemination of AI-Generated Intimate Images
Applies to
- ›Individuals creating, altering, or disseminating synthetic media
- ›Generative AI tool users and content creators
- ›Bad actors targeting individuals with deepfake imagery
Plain English
This provision modernizes Pennsylvania's nonconsensual intimate image laws by expanding statutory coverage to include artificial intelligence-generated media. Under the amended section, it is a criminal offense to create, alter, or distribute computer-generated images, deepfake videos, or modified digital photographs depicting a real, identifiable individual in a state of nudity or engaged in sexual acts without their express consent.
To establish a violation, prosecutors must prove that the accused acted with the specific criminal intent to 'harass, annoy, or alarm' another person. The law addresses both traditional nonconsensual media sharing between former intimate partners and non-partner targeted harassment campaigns using generative tools, eliminating legal arguments that synthetic media falls outside legacy statutory protections.
Key points
- •Criminalizes nonconsensual creation and distribution of AI-generated intimate images depicting real, identifiable individuals.
- •Requires proof of intent to 'harass, annoy, or alarm' the target.
- •Covers computer-generated images, deepfake videos, and algorithmically modified digital photographs.
- •Applies regardless of whether a prior intimate or personal relationship existed between offender and victim.
What you need to do
- 1.Refrain from using AI image generation or face-swapping tools to place identifiable individuals into explicit or nude contexts without consent.
- 2.Audit consumer AI software or custom generative models to prevent automated generation of nonconsensual synthetic intimate media.
- 3.Train organizational staff and content moderators to recognize and remove nonconsensual intimate deepfakes.
Cross-jurisdiction equivalents
18 Pa.C.S. § 6312 — Prohibition of AI-Generated Child Sexual Abuse Material
Applies to
- ›All natural persons and system operators within Pennsylvania jurisdiction
- ›Individuals producing, viewing, possessing, or distributing synthetic media
Plain English
This section updates Pennsylvania child protection statutes to explicitly encompass synthetic and computer-generated media depicting minors. The statutory definition of Child Sexual Abuse Material (CSAM) is broadened to include any visual media produced or altered using artificial intelligence that depicts a real or simulated minor engaged in sexually explicit conduct.
The law makes it a severe criminal offense to intentionally view, possess, control, produce, or distribute synthetic CSAM. This provision closes legal loopholes previously exploited by digital offenders who claimed that fully synthetic media did not depict a real victim, ensuring synthetic child exploitation material is prosecuted with equal legal severity.
Key points
- •Broadens legal CSAM definition to cover fully synthetic or AI-simulated depictions of minors.
- •Criminalizes viewing, possessing, controlling, producing, or distributing AI-generated CSAM.
- •Treats synthetic child sexual abuse material with equal severity under state felony statutes as real-world media.
- •Eliminates legal defense arguments based on the non-existence of a physical child victim.
What you need to do
- 1.Implement strict technical filters and content guardrails on generative AI platforms to block prompt generation of explicit content involving minors.
- 2.Immediately report any detected synthetic CSAM to law enforcement authorities and the National Center for Missing & Exploited Children (NCMEC).
- 3.Ensure content moderating workflows do not download or re-disseminate prohibited media during internal review processes.
Cross-jurisdiction equivalents
PDE Reporting & Safe2Say Protocol Guidance — Educational Institutional Reporting and Victim Support Framework
Applies to
- ›K-12 public school entities and intermediate units
- ›Higher education institutions in Pennsylvania
- ›School administrators, safety officers, and educational personnel
Plain English
Following the enactment of Act 125, the Pennsylvania Department of Education (PDE) issued administrative guidance directing public educational institutions to establish reporting protocols and support pathways for deepfake incidents affecting students or staff.
The framework integrates AI abuse reporting into the Commonwealth's Safe2Say Something anonymous reporting platform operated by the Office of Attorney General. Educational entities are instructed to coordinate support services for impacted individuals while ensuring administrative actions align with state school safety statutes.
Key points
- •Requires educational institutions to implement clear reporting protocols for student and staff deepfake incidents.
- •Integrates AI abuse reporting into the statewide Safe2Say Something anonymous system.
- •Directs schools to offer victim support while preventing secondary distribution of illegal synthetic media.
- •Aligns administrative responses with existing Pennsylvania school safety laws.
What you need to do
- 1.Update school safety handbooks, digital literacy curricula, and acceptable use policies to explicitly cover AI deepfakes.
- 2.Train school staff on safe reporting procedures through Safe2Say Something and local law enforcement.
- 3.Establish protocols to assist student victims without retaining or forwarding illicit synthetic images on school devices.
Technical Evidence & NCMEC Integration Guidelines — Cryptographic Hashing and Takedown Framework
Applies to
- ›Victims of nonconsensual synthetic media
- ›Law enforcement officers and digital forensics investigators
- ›Online platforms and hosting service operators
Plain English
This implementation protocol provides structured guidance for preserving evidence and securing technical removal of nonconsensual AI-generated media from online platforms. State agencies recommend utilizing cryptographic fingerprinting mechanisms, such as the NCMEC 'Take It Down' service, which generates unique digital hashes of prohibited media without storing original explicit files.
Participating digital platforms utilize these cryptographic hashes to automatically detect and suppress matching synthetic images across their networks. Victims and investigators are instructed to record critical forensic metadata—including platform URLs, timestamps, and account handles—prior to requesting platform content removal.
Key points
- •Leverages NCMEC Take It Down cryptographic hashing to block identical synthetic media across participating platforms.
- •Protects victim privacy by creating mathematical fingerprints without storing actual explicit imagery.
- •Mandates forensic evidence preservation (URLs, handles, timestamps) prior to initiating takedowns.
- •Facilitates cross-platform cooperation between law enforcement, victims, and technology companies.
What you need to do
- 1.Advise victims to capture screenshot metadata, account names, and source links before requesting image removal.
- 2.Utilize NCMEC Take It Down to generate digital hashes for automated platform removal of explicit synthetic imagery.
- 3.Maintain strict chain-of-custody protocols when preserving digital forensic evidence for criminal proceedings.
Enforcement & Penalties Provisions — Criminal Enforcement, Prosecutorial Jurisdiction, and Penalties
Applies to
- ›Pennsylvania Office of Attorney General
- ›County District Attorneys
- ›Criminal defendants charged under 18 Pa.C.S. § 3131 or § 6312
Plain English
This provision establishes the operational enforcement architecture for Act 125, granting concurrent investigative and prosecutorial authority to the Pennsylvania Office of Attorney General cybercrime units and local county district attorneys.
Violations involving nonconsensual adult intimate deepfakes are penalized as criminal misdemeanors or felonies depending on prior offenses and context, while synthetic child sexual abuse material offenses are classified under high-grade felony categories. Defendants maintain standard constitutional appeal rights through Pennsylvania state courts, where judicial evaluation focuses on criminal intent, identity verification, and statutory exceptions.
Key points
- •Grants enforcement power to the PA Office of Attorney General and county district attorneys.
- •Classifies nonconsensual intimate AI dissemination as a misdemeanor or felony depending on circumstances.
- •Categorizes synthetic CSAM violations as severe criminal felonies carrying potential state imprisonment.
- •Preserves standard appellate rights and statutory defense evaluations in Pennsylvania Courts of Common Pleas.
What you need to do
- 1.Be aware that nonconsensual generation or sharing of AI intimate media exposes offenders to immediate felony prosecution.
- 2.Legal defense teams must evaluate statutory intent elements ('harass, annoy, or alarm') and forensic identification accuracy.
- 3.Ensure compliance across all Pennsylvania operations, as state prosecutors actively file felony charges under Act 125.
Need help applying this to your case?
The wizard takes 60 seconds and tells you which articles you actually need to worry about based on your jurisdictions, use case, and data.
Start the wizard →