UK Fast-Tracks Criminal Law Against AI-Generated Deepfakes

The Grok Controversy

The legislation comes after weeks of international backlash over Grok, the AI chatbot integrated into Elon Musk's social media platform X. In late December 2025, users discovered they could exploit Grok's newly introduced image editing feature to generate sexualized images of women and children. The process was disturbingly straightforward: users would tag the bot in comments on existing photos with prompts such as "put her in a bikini," and Grok would modify the images accordingly.

Grok Imagine, the platform's AI-powered image generator launched in August 2025, includes a paid feature called Spicy Mode that allows creation of content including partial nudity. When X added an "edit image" feature in late December, it enabled users to modify any image on the platform, creating a perfect storm for abuse.

Technology Secretary Liz Kendall, addressing the House of Commons on January 12, described disturbing reports from the Internet Watch Foundation detailing criminal imagery of children as young as 11 and images of women "tied up and gagged, with bruises, covered in blood."

Two-Pronged Legal Strategy

The UK government is pursuing a dual approach to combat AI-generated intimate images. The fast-tracked provisions from the Data (Use and Access) Act target individuals who create such content, making it a criminal offense to create or request deepfake images without consent. This legislation takes effect on February 6, 2026, following the standard 21-day period after being signed.

Simultaneously, the Crime and Policing Bill, currently moving through Parliament, will criminalize "nudification" apps, making it illegal for companies to supply tools specifically designed to create non-consensual intimate images. This two-pronged approach addresses both individual perpetrators and the platforms that enable such abuse.

Justice Secretary David Lammy issued a stark warning to potential offenders: "Let this be a clear message to every cowardly perpetrator hiding behind a screen: you will be stopped and when you are, make no mistake that you will face the full force of the law."

Regulatory Investigation and Penalties

Media regulator Ofcom launched a formal investigation into X on January 12, 2026, examining whether the platform failed to comply with its obligations under the Online Safety Act. The investigation carries significant potential consequences: if violations are found, X could face fines of up to 18 million pounds or 10% of its qualifying global revenue, whichever is greater.

In extreme cases of serious and ongoing non-compliance, Ofcom possesses the power to seek court orders compelling internet service providers to block access to the platform entirely within the UK. This represents one of the most severe enforcement mechanisms available under British law.

Late Wednesday, X announced it had introduced geoblocking measures to prevent users from creating images of real people in bikinis, underwear, and similar attire in jurisdictions where such content is illegal. Ofcom called this a "welcome development" but emphasized that its investigation continues regardless of these changes.

Global Response

The UK's action is part of a broader international response to the Grok controversy. Indonesia and Malaysia became the first countries to completely block access to Grok, with Indonesia implementing the ban on Saturday and Malaysia following on Sunday. The moves demonstrate the severity with which some nations are treating the issue.

The European Commission on January 8 ordered X to retain all internal documents and data related to Grok until the end of 2026, condemning the spread of explicit, child-like content as "appalling" and "disgusting." This document preservation order suggests potential future enforcement actions at the European level.

In the United States, the Senate unanimously passed legislation allowing victims to sue over non-consensual, sexually explicit AI-generated images. California Attorney General Rob Bonta launched an investigation, stating: "The avalanche of reports detailing the non-consensual sexually explicit material that xAI has produced and posted online in recent weeks is shocking."

Political Tensions

Prime Minister Keir Starmer weighed in on the controversy in his first post on X since stepping back from the platform on January 8. "Free speech is not the freedom to violate consent," Starmer wrote. "Young women's images are not public property, and their safety is not up for debate."

Elon Musk has maintained that Grok complies with the law and accused critics of seeking "any excuse for censorship." He appeared to mock the situation by sharing Grok-generated images, including one depicting himself in a bikini. However, he also warned that "anyone using or prompting Grok to make illegal content will suffer the same consequences as if they upload illegal content."

Deputy Prime Minister David Lammy reported that US Vice President JD Vance expressed agreement during a Washington meeting that sexualized AI deepfakes are "entirely unacceptable," suggesting some bipartisan consensus in the United States despite the broader political tensions.

Implications for AI Regulation

The UK's fast-tracked legislation represents a significant milestone in AI regulation, demonstrating that governments are willing to act swiftly when AI technologies enable clear harms. The dual approach of criminalizing both creation and the tools that enable creation could serve as a model for other jurisdictions grappling with similar issues.

The case also highlights the challenges of regulating AI-powered platforms that operate globally while being subject to varying national laws. X's geoblocking response suggests that platforms may need to implement increasingly sophisticated geographic restrictions to comply with divergent legal frameworks.

As enforcement actions are expected to intensify throughout 2026, with major investigations and potentially significant fines anticipated, the Grok controversy may mark a turning point in how democracies approach AI safety and content moderation. The UK's willingness to threaten platform blocking demonstrates that even major social media companies are not beyond the reach of national regulation when fundamental rights and child safety are at stake.