United States - Pennsylvania - Deepfakes Regulation (Act No. 35/2025)

Overview

Pennsylvania Act No. 35 of 2025, which originated as Senate Bill 649, represents a significant legislative effort in the Commonwealth of Pennsylvania to address the emerging challenges posed by artificial intelligence-generated content, particularly deepfakes. Enacted on July 7, 2025, and taking effect on September 5, 2025, this Act amends Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes, specifically within the realm of forgery and fraudulent practices. The primary objective of the legislation is to criminalize the malicious use of 'forged digital likenesses,' encompassing deepfakes and voice clones, when created or distributed with the intent to defraud, injure, or facilitate such harmful activities. This proactive measure aims to safeguard individuals and institutions from various forms of digital deception, including financial scams, identity theft, and the spread of misinformation, while carefully balancing these protections with fundamental rights such as freedom of speech.

The impetus behind Act 35 of 2025 stems from the rapid advancement and increasing accessibility of generative artificial intelligence technologies, which enable the creation of highly realistic yet entirely fabricated images, audio, and video. Lawmakers recognized an urgent need to modernize existing forgery statutes to encompass these new forms of digital impersonation, which had previously exploited legal loopholes. The Act provides law enforcement with essential tools to prosecute individuals who weaponize AI for nefarious purposes, ranging from impersonating loved ones to swindle the elderly, to fabricating political content designed to mislead voters, and maliciously targeting private citizens or celebrities. By classifying such acts as 'digital forgery,' Pennsylvania has established a clear legal framework to deter and penalize the harmful misuse of AI-generated content, thereby enhancing consumer protection and preserving public trust in digital media.

Definitions

While the full text of Act 35 of 2025 provides precise legal definitions, the core concept revolves around 'forged digital likeness.' This term refers to a visual representation or audio recording of a real person that has been generated or manipulated by artificial intelligence to appear genuine, but which is, in fact, not authentic. The Act specifically targets instances where such a likeness is created or distributed without the consent of the individual depicted, and with the explicit intent to defraud or injure, or with the knowledge and intent to facilitate fraud or injury by another party. This broad definition is intended to cover a wide array of AI-generated content, including deepfake videos, synthetic audio (voice clones), and manipulated images that falsely portray a person's appearance or speech.

Beyond the central definition of 'forged digital likeness,' the Act implicitly defines the scope of prohibited conduct through its emphasis on 'intent to defraud or injure.' This critical element ensures that the law targets malicious applications of deepfake technology rather than benign or protected uses. Furthermore, the legislation addresses the act of 'distribution,' meaning the dissemination or sharing of such forged digital likenesses. The inclusion of provisions for both creation and distribution underscores the comprehensive nature of the law, aiming to tackle the problem at multiple stages of the deepfake lifecycle. The Act also outlines specific exceptions and affirmative defenses, which, in essence, define what is not considered digital forgery under this statute, such as constitutionally protected activities like satire or parody, and the inclusion of clear disclaimers.

Governance and Institutional Framework

The governance and institutional framework for enforcing Pennsylvania Act No. 35 of 2025 primarily rests within the existing criminal justice system of the Commonwealth. By amending Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes, the Act integrates the offense of digital forgery into established legal structures. This means that state and local law enforcement agencies, including the Pennsylvania State Police and local police departments, are responsible for investigating alleged violations. Prosecutors, such as district attorneys at the county level and the Pennsylvania Attorney General's office, are empowered to bring charges against individuals who create or disseminate forged digital likenesses with malicious intent. The courts of Pennsylvania will adjudicate these cases, applying the grading of offenses and penalties as stipulated in the Act. This approach leverages existing institutional capacities rather than creating new regulatory bodies, allowing for a more immediate and seamless implementation of the deepfake regulations.

The Act's placement within the Crimes and Offenses title signifies that violations are treated as criminal matters, subject to established investigative procedures, evidentiary standards, and judicial processes. The legislation provides law enforcement with the necessary legal 'tools' to combat digital deception, acknowledging the evolving nature of technology-facilitated crimes. Furthermore, the Act's provisions for exceptions, such as those for law enforcement officers engaged in their official duties, clarify the scope of its application and ensure that legitimate governmental functions are not impeded. The collaborative effort between legislators and the Attorney General's office in developing and supporting this law highlights a coordinated governmental approach to addressing the dangers posed by AI, emphasizing the role of established legal and enforcement institutions in maintaining public safety and trust in the digital age.

Key Focus Areas

Act No. 35 of 2025 focuses on several critical areas related to the malicious use of AI-generated content. A primary focus is fraud prevention and consumer protection, particularly in safeguarding vulnerable populations such as the elderly from sophisticated financial scams involving deepfake voice clones or visual impersonations. The legislation aims to prevent instances where criminals impersonate individuals, including family members, to trick victims into divulging personal information or transferring monetary assets. By criminalizing the creation and distribution of forged digital likenesses with fraudulent intent, the Act provides a legal recourse against those who exploit AI for financial gain at the expense of unsuspecting citizens. This includes schemes designed to coerce or commit theft of monetary assets or property, which are subject to more severe felony charges.

Another significant focus area is the protection of individual reputation and privacy, addressing the harm caused by non-consensual deepfakes that injure personal reputations or cause distress. The Act recognizes that the widespread dissemination of fabricated images or audio can have severe consequences for individuals, impacting their public image, professional standing, and personal well-being. Furthermore, the legislation implicitly touches upon election integrity by aiming to prevent the fraudulent misleading and misinforming of voters through fabricated political videos or calls. While not exclusively an election law, its broad prohibition against digital forgery with intent to defraud or injure can encompass deceptive political communications. Crucially, the Act also emphasizes balancing enforcement with fundamental rights, incorporating explicit exceptions for constitutionally protected activities such as satire, parody, commentary, criticism, and works of public interest, ensuring that legitimate artistic, journalistic, and expressive works are not unduly restricted.

Implementation Framework

The implementation framework for Pennsylvania Act No. 35 of 2025 is designed to integrate seamlessly into the existing legal and enforcement mechanisms of the Commonwealth. As an amendment to Title 18 (Crimes and Offenses), the Act's provisions become part of the established criminal code, meaning that no new specialized agencies or complex bureaucratic structures are required for its enforcement. Law enforcement officers, including state and local police, are now equipped with the statutory authority to investigate instances of 'digital forgery,' which involves the creation or distribution of forged digital likenesses with malicious intent. The Act clarifies that such actions constitute a criminal offense, thereby providing a clear legal basis for arrests, evidence collection, and the initiation of legal proceedings. This streamlined approach ensures that the law can be applied immediately and effectively by personnel already trained in criminal investigations.

Furthermore, the judicial system, from lower courts to appellate bodies, will be responsible for interpreting and applying the Act's provisions, including the grading of offenses (misdemeanor or felony) and the imposition of penalties. Prosecutors will utilize the Act to charge individuals involved in deepfake-related fraud, impersonation, or injury. The inclusion of specific exceptions and affirmative defenses, such as those for constitutionally protected speech and the use of disclaimers, necessitates careful consideration during both investigation and prosecution to ensure the law is applied appropriately and does not infringe upon legitimate expression. Training and guidance for law enforcement and legal professionals on the nuances of AI-generated content and the specific elements of 'digital forgery' will be crucial to ensure consistent and effective implementation across the state. The Act's effective date of September 5, 2025, provided a transition period for these stakeholders to prepare for its enforcement.

Monitoring and Evaluation

Monitoring and evaluation of Pennsylvania Act No. 35 of 2025 will primarily occur through the ongoing assessment of its impact within the criminal justice system and its effectiveness in deterring and prosecuting deepfake-related offenses. Law enforcement agencies and prosecuting offices across Pennsylvania will likely track the number of investigations initiated, charges filed, and convictions secured under the 'digital forgery' statute. This data will provide crucial insights into the prevalence of deepfake misuse and the practical application of the law. Furthermore, the types of cases brought forward—whether they involve financial fraud, reputational harm, or other forms of injury—will help evaluate which specific harms the Act is most effectively addressing. Regular reporting from the Attorney General's office and other judicial bodies on these statistics could contribute to a broader understanding of the law's real-world impact.

Beyond quantitative metrics, qualitative evaluation will also be essential. This could involve feedback from victims of deepfake scams regarding the effectiveness of legal recourse, as well as input from legal practitioners on any ambiguities or challenges encountered in applying the Act's provisions, particularly concerning the balance between enforcement and First Amendment rights. The legislature may also conduct periodic reviews to assess whether the Act remains relevant and effective in light of evolving AI technology and emerging forms of digital deception. Such reviews could lead to amendments or further legislative actions if gaps or unforeseen consequences are identified. The ongoing public discourse around AI regulation and deepfakes, both at the state and federal levels, will also serve as an informal monitoring mechanism, highlighting areas where the law may need adjustment to keep pace with technological advancements and societal impacts.

Penalties, Liability, and Appeals

Pennsylvania Act No. 35 of 2025 establishes a clear framework for penalties and liability related to the offense of 'digital forgery.' The severity of the penalty depends on the nature and intent of the violation. A person found guilty of digital forgery, defined as generating or creating and distributing a forged digital likeness as genuine with the intent to defraud or injure, or facilitating such actions, is generally subject to a misdemeanor of the first degree. This classification carries significant consequences, including potential fines ranging from $1,500 to $10,000 and/or imprisonment for up to five years. This baseline penalty underscores the Commonwealth's serious stance against the malicious use of AI-generated content, aiming to deter individuals from engaging in such deceptive practices.

For more egregious offenses, the Act stipulates enhanced penalties. If a person violates the digital forgery statute through involvement in a scheme to defraud, coerce, or commit theft of monetary assets or property, the offense is elevated to a felony of the third degree. A third-degree felony carries substantially higher penalties, including fines of up to $15,000 and/or imprisonment for up to seven years. This tiered penalty structure reflects the legislature's intent to impose stricter sanctions for deepfake activities that pose greater financial or coercive harm. Regarding liability, the Act holds individuals directly responsible for the creation and distribution of malicious deepfakes. However, it also includes specific carve-outs: technology providers or developers, and information service providers, are generally exempt from liability unless they intentionally facilitated the creation and dissemination of the forged digital likeness. In terms of appeals, individuals convicted under this Act would have access to the standard appellate processes available within the Pennsylvania judicial system, allowing for review of legal errors or procedural issues in their cases.

Relationship to Other Instruments

Pennsylvania Act No. 35 of 2025 operates within and complements the broader legal landscape of the Commonwealth, particularly by amending Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes. This integration means that the Act's provisions on 'digital forgery' interact with existing laws concerning fraud, identity theft, harassment, and other related criminal activities. For instance, while the Act specifically addresses AI-generated content, the underlying intent to defraud or injure may also fall under existing statutes related to financial fraud or impersonation. The Act serves to modernize these existing legal instruments by explicitly extending their reach to cover technologically advanced forms of deception, thereby closing potential legal loopholes that deepfake technology might otherwise exploit. It does not replace these broader statutes but rather enhances them by providing a specific legal tool for AI-facilitated crimes.

Furthermore, Act 35 builds upon earlier legislative efforts in Pennsylvania to address harmful AI-generated content, particularly those related to non-consensual sexual imagery. While Senate Bill 649 focuses broadly on fraudulent and injurious deepfakes, other legislation, such as Senate Bill 1213 (mentioned in search results, though a separate bill), specifically targets deepfake images of minors and child sexual abuse materials. This indicates a growing and multi-faceted legislative approach in Pennsylvania to regulate various harmful applications of AI. The Act also carefully navigates its relationship with constitutional protections, particularly the First Amendment. By including explicit exceptions for satire, parody, commentary, criticism, and works of public interest, the law aims to avoid infringing upon legitimate forms of expression, distinguishing between malicious intent and protected speech. This careful calibration ensures that the new deepfake regulations are consistent with established legal principles and do not create unintended chilling effects on free expression.

International Alignment

While Pennsylvania Act No. 35 of 2025 is a state-level law, its objectives and approach align with a growing global trend to regulate artificial intelligence and address the harms associated with deepfakes. Many jurisdictions worldwide are grappling with similar concerns regarding misinformation, fraud, and reputational damage caused by synthetic media. The Act's focus on criminalizing the creation and distribution of forged digital likenesses with malicious intent mirrors legislative initiatives seen in other countries and at a supra-national level, such as discussions within the European Union regarding AI regulation. The inclusion of exceptions for satire, parody, and journalistic works also reflects a common challenge in balancing regulation with freedom of expression, a principle widely recognized in international human rights frameworks.

The specific targeting of financial scams and impersonation through deepfakes resonates with concerns raised by international bodies and cybersecurity experts globally. As cross-border digital crimes become more prevalent, the existence of robust domestic legislation, such as Pennsylvania's Act 35, contributes to a broader international effort to create a legal deterrent against such activities. While there isn't direct "international alignment" in the sense of a treaty or mutual recognition agreement specifically for this Pennsylvania law, its underlying principles—protecting individuals from digital deception and holding perpetrators accountable—are consistent with the policy goals of many nations and international organizations striving to mitigate the risks of advanced AI technologies. The Act's contribution to a patchwork of state-level deepfake laws within the United States also forms part of a national response that collectively informs and is informed by global regulatory developments.

Implementation Timeline

Compliance Checklist

Sources and References