From Images to Liability- Deepfake Policy Lessons…

A recently filed lawsuit against Lancaster Country Day School in Pennsylvania illustrates the legal liabilities institutions face not only for the alleged underlying misconduct, but also for their failure to respond appropriately after learning of the situation. This case underscores the growing concern that organizational inaction regarding AI-generated content can create significant legal risks.

What happened

According to the complaint, two students used AI tools to generate hundreds of sexually explicit deepfake images of female classmates and shared the content online. The lawsuit alleges that school officials received reports regarding the conduct months before law enforcement became involved. Despite having this knowledge, the school reportedly failed to take appropriate investigative or corrective steps to address the behavior.

While this incident occurred in an educational setting, the legal implications are increasingly relevant to the workplace. Employers must consider how to respond when they receive reports that an employee may be creating, possessing, or distributing AI-generated sexual images of coworkers. Once an organization receives credible information that its systems or personnel are involved in victimizing others, a passive response may be difficult to defend in court. Legal experts note that plaintiffs increasingly contend that an employer that fails to investigate or intervene after receiving notice contributes to the continuation of the harm. Organizations should treat deepfake-related complaints with the same level of seriousness as allegations of sexual harassment, threats, or workplace violence, ensuring they conduct prompt, thorough, and impartial investigations.