Skip to main content

Privacy And Synthetic Media - Navigating The Intersection Of AI, Data Protection, And Media Law

Author: LawSphereX

Category: Constitutional & Human Rights

Published:

Updated:

PRIVACY AND SYNTHETIC MEDIA: NAVIGATING THE

INTERSECTION OF AI, DATA PROTECTION, AND MEDIA LAW

Prashant Dubey, ICFAI Law School, Dehradun

ABSTRACT

The rise of synthetic media, generated or altered by AI, presents significant challenges to privacy, data protection, and media law. This article examines the privacy implications of AI-driven content, especially deepfakes, which replicate individuals' likenesses without consent. While synthetic media benefits industries like entertainment and advertising, it raises ethical concerns, blurring the line between genuine and manipulated content. The misuse of biometric data, including facial recognition and voice patterns, further complicates these concerns. In India, the right to privacy is constitutionally protected under Article 21, but existing laws like the Information Technology Act, 2000 fall short in addressing the unique issues posed by synthetic media. Comparatively, the GDPR in the European Union provides stronger safeguards for biometric data, while the U. S.

approach remains fragmented across states, such as California’s AB-602 targeting deepfakes. The article highlights the global disparity in legal frameworks and advocates for stronger, adaptive regulations in India to manage the privacy risks associated with AI-generated media. It also explores ethical dilemmas around consent, data usage, and public trust, underscoring the need for technological solutions like watermarking and AI detection to protect privacy in the age of synthetic media.

Introduction

As artificial intelligence (AI) continues to evolve, its applications in media creation are expanding at an unprecedented pace. One such advancement is the development of synthetic media, which refers to content—such as images, videos, and voices—created or manipulated by AI technologies. These AI-driven innovations have enormous potential for industries like entertainment, advertising, and education. However, they also raise significant concerns regarding privacy, data protection, and media law. With AI-generated content becoming increasingly realistic, the line between genuine and synthetic media is blurring, making it easier for malicious actors to exploit such technologies to manipulate information, produce deepfakes, or violate personal privacy. Synthetic media's impact on privacy is profound.

A single image, voice recording, or video can now be synthesized to mimic an individual's likeness without their consent. This not only breaches personal privacy but also raises broader ethical and legal questions about how data— whether it’s facial recognition data, voice patterns, or personal information—should be regulated in the digital era. In India, the right to privacy is a fundamental right under Article

21 of the Constitution, as recognized by the landmark Puttaswamy judgment (Puttaswamy

v. Union of India, 2017)1. Despite this, Indian legal frameworks, including the Information Technology (IT) Act, 2000, remain limited in addressing the unique challenges posed by AIgenerated content and synthetic media. The situation is not confined to India. Globally, countries are grappling with the same issues. The European Union’s General Data Protection Regulation (GDPR), for example, provides a comprehensive framework for personal data protection but is still adapting to the challenges posed by AI technologies (European Commission, 2020)2. In contrast, regions like the United States lack a unified federal law addressing these concerns, although some states, like California, have introduced legislation like the California Consumer Privacy Act (CCPA) (World Economic Forum, 2020)3.

This comparison highlights the global relevance of privacy in the age of AI-generated media and underscores the need for stronger, more adaptive regulations that can protect individual privacy while balancing the benefits of AI innovation.

1 Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1.

2 European Commission, Guidelines on the Application of the GDPR in Relation to Artificial Intelligence and Data Protection (2020), available at https://ec.europa.eu/info/publications/gdpr-and-ai (last visited Sept. 26, 3 World Economic Forum, Deepfakes and Synthetic Media: Reality, Impacts, and Regulation (2020), available at https://www.weforum.org/reports/deepfakes-and-synthetic-media (last visited Sept. 26, 2024).

In this article, we will explore the intersection of AI, data protection, and media law with a focus on synthetic media. By comparing the Indian and global legal contexts, we will examine how privacy laws and regulations are evolving to meet the challenges posed by AI-driven content. Through this comparative analysis, the article aims to provide a nuanced understanding of the privacy risks, regulatory gaps, and the potential for legal reforms to manage synthetic media in the digital age. Privacy Concerns Arising from Synthetic Media The creation and proliferation of synthetic media bring with them significant privacy concerns. Synthetic media, particularly in the form of deepfakes, allow for the creation of hyper-realistic images and videos of individuals without their consent.

Such content can be manipulated to show people in compromising or inappropriate situations, leading to serious reputational, emotional, and legal ramifications. As these technologies become more accessible, the potential for misuse grows exponentially. A primary privacy concern stems from the fact that synthetic media can be generated using facial recognition data, voice patterns, and other biometric information. These data points are often collected from publicly available sources, such as social media profiles or publicly shared videos, without the individual's knowledge or consent. This raises questions about informed consent and the ethical use of data. While some may argue that data shared in the public domain can be freely used, the lack of specific consent for the creation of synthetic media is a violation of personal privacy.

In India, the right to privacy is a constitutional right, as upheld in the Puttaswamy case (Puttaswamy v. Union of India, 2017)4. The Information Technology Act, 2000, and its associated rules, such as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, provide some safeguards against data misuse. However, these laws are not fully equipped to handle the specific challenges of synthetic media. For example, while there are provisions that penalize the misuse of personal information, there is no specific legislation that addresses the nonconsensual creation of synthetic media in India. In contrast, the European Union's GDPR provides more robust protections regarding biometric data. Under the GDPR, biometric data is classified as sensitive personal data, and

4 Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 S.C.C. 1.

its processing requires explicit consent from the individual (European Commission, 2020)5. The regulation also emphasizes the right to data minimization and data protection by design, which can serve as important legal safeguards in the context of synthetic media. However, even the GDPR, which is considered one of the most comprehensive data protection frameworks in the world, has limitations when it comes to addressing the rapid advancements in AI technologies. The United States, on the other hand, lacks a unified federal law like the GDPR. While certain states, such as California, have enacted privacy laws like the California Consumer Privacy Act (CCPA), these laws do not explicitly cover the use of AI-generated content or synthetic media (Cal. Civ. Code §1798. 100)6.

However, there are ongoing discussions about updating existing laws to better regulate the creation and use of synthetic media. This global disparity in legal frameworks highlights the need for a more cohesive and comprehensive approach to regulating synthetic media. While countries like India and the United States are still developing their privacy regulations, the GDPR could serve as a model for crafting legislation that specifically addresses the privacy implications of AI-generated content. Challenges in Regulating Synthetic Media in India India faces substantial hurdles in regulating synthetic media due to the lack of a dedicated legal framework that addresses the intricacies of AI-generated content.

The Information Technology Act, 2000, India's primary legislation governing technology and data privacy, was formulated well before synthetic media tools like deepfakes or AI-generated content became prevalent. As a result, this law fails to provide comprehensive measures to handle the privacy violations and ethical concerns associated with such emerging technologies. One of the prominent issues is the absence of regulations governing the use of biometric data in creating synthetic media. While India has rules for safeguarding personal data, such as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, these primarily focus on financial and personal information, leaving biometric data—crucial to the creation of deepfakes—largely outside the scope of regulation.

The ease with which facial data or voice samples can be extracted from 5 European Commission, Guidelines on the Application of the GDPR in Relation to Artificial Intelligence and Data Protection (2020), available at https://ec. europa. eu/info/publications/gdpr-and-ai (last visited Sept. 26,

6 Cal. Civ. Code § 1798.100 (2018) (California Consumer Privacy Act).

publicly available platforms, like social media, and used to produce highly realistic synthetic media without consent presents significant privacy concerns. Additionally, the forthcoming Digital Personal Data Protection Act (DPDPA), which aims to strengthen individual privacy protections, does not directly address the creation or misuse of synthetic media. While the act outlines penalties for unauthorized use and processing of personal data, it lacks specific provisions dealing with AI-generated media, where data such as someone’s likeness or voice may be manipulated without their consent (Government of India, 2023)7. Another challenge is the unclear application of existing legal provisions to synthetic media. For instance, the Indian Penal Code (IPC), 1860, contains sections related to impersonation and defamation, which could potentially be applied to deepfakes.

However, the IPC's scope, especially in digital contexts, remains vague. In cases involving synthetic media, proving intent to harm or identifying the creator can be difficult, complicating legal accountability. For example, defamation requires evidence of malicious intent, but deepfakes often obscure who created or distributed the content, making legal recourse challenging. In contrast, global frameworks like the European Union’s GDPR offer clearer protections related to informed consent for the use of personal data, including biometric data, in synthetic media creation (European Commission, 2020)8. The GDPR's provisions on the right to be forgotten and data protection by design provide robust protections, particularly in cases of privacy violations linked to AI-generated content. Similarly, the United States has started addressing synthetic media regulation at the state level.

California’s AB-602, for instance, introduces penalties for individuals who use deepfakes to harm others or manipulate a person’s likeness for malicious reasons (California Legislative Information, 2021)9. The divergence between Indian and global legal frameworks underscores the need for India to introduce specific legislation targeting synthetic media. By learning from global examples, such as the GDPR and evolving state laws in the U. S. , India can develop a comprehensive legal

7 Government of India, Digital Personal Data Protection Act (DPDPA) (2023), available at

https://www.meity.gov.in (last visited Sept. 26, 2024). 8 European Commission, Guidelines on the Application of the GDPR in Relation to Artificial Intelligence and Data Protection (2020), available at https://ec.europa.eu/info/publications/gdpr-and-ai (last visited Sept. 26,

9 California Legislative Information, California AB-602

Deepfakes Law (2021), available at https://leginfo. legislature. ca. gov/faces/billTextClient. xhtml? bill_id=202120220AB602 (last visited Sept. 26, structure that not only safeguards individual privacy but also ensures accountability for the misuse of AI-generated content. Ethical Implications of Synthetic Media on Privacy The emergence of synthetic media introduces significant ethical concerns, particularly in relation to privacy and the utilization of personal data. Technologies such as deepfakes pose ethical dilemmas regarding how AI can manipulate digital identities without individuals’ consent. The ability to create content that realistically depicts a person’s likeness, voice, or actions raises critical questions about the safeguarding of personal autonomy and privacy rights. A primary ethical issue is the question of consent.

Often, individuals whose images or voices are manipulated in synthetic media have not given explicit permission for their likenesses to be used. This lack of consent becomes particularly problematic when synthetic media is employed to disseminate disinformation or harm an individual's reputation. The ethical quandary arises from the fact that these technologies can fabricate highly believable scenarios in which individuals appear to engage in activities they did not actually perform, leading to potential damage to their reputations, harassment, or even legal repercussions. Another pressing ethical concern relates to the undermining of trust in digital content. The proliferation of deepfakes and AI-generated media erodes the trust that audiences place in visual information, complicating efforts to distinguish between authentic and manipulated content.

This degradation of trust can have extensive societal consequences, particularly in crucial sectors like politics, journalism, and interpersonal relationships, where the credibility of information is paramount. In India, which acknowledges privacy as a fundamental right under Article 21 of the Constitution, the ethical challenges of protecting this right in the digital landscape are amplified by the increasing use of synthetic media. While privacy regulations like the Information Technology Act, 2000, and the anticipated Digital Personal Data Protection Act (DPDPA) aim to protect personal information, they currently lack specific provisions addressing the unauthorized use of biometric data or the creation of synthetic media (Government of India, 2023)10.

The absence of clear legal and ethical standards regarding AI- 10 Government of India, Digital Personal Data Protection Act (2023), available at https://www. meity. gov. in (last visited Sept. 26, 2024). generated content in India creates a significant accountability gap when individuals’ rights are violated through these technologies. Internationally, frameworks like the General Data Protection Regulation (GDPR) highlight the necessity of consent and data minimization in the handling of personal information. These principles are vital when examining the ethical implications of synthetic media, as they seek to restrict the collection and application of personal data to what is essential, thereby protecting privacy rights.

Nevertheless, even with the protections afforded by the GDPR, questions linger about how much control individuals have over the use of their biometric data in the creation of synthetic media (European Commission, 2020)11. In the United States, ethical discussions surrounding synthetic media are beginning to take shape at the state level. For example, California’s AB-602 addresses the harmful use of synthetic media to impersonate individuals without their consent, particularly in cases of revenge porn or political manipulation (California Legislative Information, 2021)12. However, a more comprehensive ethical framework at the federal level remains absent, leaving individuals susceptible to privacy infringements across various states.

The ethical challenges associated with synthetic media underscore the urgent need for stronger national and global regulations to ensure the protection of privacy and individual autonomy. By establishing clearer ethical standards and legal frameworks, the risks associated with synthetic media can be mitigated while fostering responsible innovation in AI technologies. Global Perspectives on Synthetic Media Regulation Regulating synthetic media is an increasingly pressing concern worldwide, with various countries and regions adopting diverse approaches to address the complexities it introduces. This global perspective on synthetic media regulation provides valuable insights into the effectiveness of different legal frameworks and the ongoing challenges they face.

In the European Union, the General Data Protection Regulation (GDPR) serves as a pioneering framework for data protection and privacy rights, setting stringent requirements for the handling of personal data. The GDPR emphasizes principles such as informed consent and 11 European Commission, Guidelines on the Application of the GDPR in Relation to Artificial Intelligence and Data Protection (2020), available at https://ec. europa. eu/info/publications/gdpr-and-ai (last visited Sept. 26,

12 California Legislative Information, California AB-602

Deepfakes Law (2021), available at https://leginfo. legislature. ca. gov/faces/billTextClient. xhtml? bill_id=202120220AB602 (last visited Sept. 26, data minimization, which are particularly relevant when considering synthetic media that utilizes personal data for its creation. Under the GDPR, individuals have the right to control how their biometric data is used, which significantly impacts the ethical use of synthetic media technologies (European Commission, 2020)13. Additionally, the EU has recognized the potential for deepfakes to cause societal harm and is considering specific regulations targeting AI-generated content. This includes proposals that could mandate transparency regarding the creation of synthetic media, such as labeling AI-generated content to help audiences discern between authentic and manipulated materials.

In contrast, the United States has taken a more fragmented approach to synthetic media regulation, with various states enacting their own laws to combat misuse. California, for example, has introduced laws like AB-602, which penalizes the malicious use of deepfakes, especially in contexts such as political disinformation and revenge porn (California Legislative Information, 2021)14. However, the absence of a comprehensive federal framework means that protections vary significantly across states, leaving individuals vulnerable to privacy violations. Recent discussions around federal legislation indicate a growing recognition of the need for a more unified approach, but concrete steps remain to be seen. China has also started to address the challenges posed by synthetic media through regulatory measures aimed at content creation and distribution.

In 2019, the Chinese government implemented regulations requiring platforms to label AI-generated content, thereby enhancing transparency and accountability (State Council of China, 2019)15. Additionally, China has made efforts to combat the spread of deepfakes in political contexts, reflecting the government's focus on maintaining social stability. However, critics argue that these measures may also be used to suppress dissent and control the narrative around sensitive topics. In India, the regulatory landscape for synthetic media remains underdeveloped. Although there is growing awareness of the implications of AI-generated content, existing laws do not adequately address the unique challenges posed by synthetic media.

The proposed Digital Personal Data Protection Act (DPDPA) aims to strengthen data privacy protections but does 13 European Commission, Guidelines on the Application of the GDPR in Relation to Artificial Intelligence and Data Protection (2020), available at https://ec. europa. eu/info/publications/gdpr-and-ai (last visited Sept. 26,

14 California Legislative Information, California AB-602

Deepfakes Law (2021), available at https://leginfo. legislature. ca. gov/faces/billTextClient. xhtml? bill_id=202120220AB602 (last visited Sept. 26, 15 State Council of China, Regulations on the Management of Deep Synthesis Technology (2019), available at http://www. gov. cn/zhengce/content/2019-12/19/content_5455241. htm (last visited Sept. 26, 2024). not yet include specific provisions targeting synthetic media (Government of India, 2023). As the use of synthetic media increases, India must consider how to draw upon the lessons learned from other jurisdictions while developing its own comprehensive regulatory framework. The contrasting approaches to regulating synthetic media highlight the need for a balanced and adaptable framework that considers both individual rights and the innovative potential of AI technologies.

Learning from global practices can help countries, including India, create regulations that not only safeguard privacy but also encourage responsible technological advancement. Technological Solutions and Their Role in Privacy Protection As synthetic media technologies continue to evolve, so do the strategies and tools designed to safeguard privacy. Technological solutions play a crucial role in addressing the ethical and legal challenges posed by synthetic media, offering innovative approaches to enhance transparency, consent, and user control over personal data.

1 Watermarking and Content Identification

One effective method for mitigating the risks associated with synthetic media is the implementation of watermarking techniques. By embedding digital watermarks in synthetic media content, creators can provide identifiable information about the source and authenticity of the material. This technology enables viewers to discern between genuine and manipulated content, fostering transparency in digital media consumption (Chesney & Citron, 2019)16. For example, a watermark can indicate that a video has been generated or altered using AI, thereby alerting viewers to the potential for manipulation.

2 Consent Management Systems

Another promising technological solution is the development of consent management systems that empower individuals to control how their personal data is used in the creation of synthetic media. These systems allow users to set permissions regarding the use of their likenesses or biometric data, ensuring that any use of their identity in synthetic content is consensual. Such systems could be integrated into platforms that generate synthetic media, requiring explicit consent before utilizing any 16 Bobby Chesney & Danielle Keats Citron, Deep Fakes: A Looming Challenge for Privacy, Democracy, and National Security, 71 Stan. L. Rev. Online 1 (2019), available at https://www. stanfordlawreview. org/online/deep-fakes/ (last visited Sept. 26, 2024). individual's data (Citron, 2020)17.

By enhancing user control, these systems can significantly reduce the risks associated with unauthorized use of personal information.

3 AI Detection Tools

As synthetic media becomes increasingly sophisticated, the need for tools that can detect AI-generated content has emerged. Companies and researchers are developing AI detection technologies that analyze patterns and inconsistencies in digital media to identify whether content has been generated or manipulated by AI. For instance, detection algorithms can flag deepfakes by examining discrepancies in audio-visual synchronization, lighting, and pixel-level anomalies (Hwang et al. , 2020)18. These detection tools are essential for maintaining trust in digital media, especially in contexts where misinformation can have serious consequences, such as political discourse or public safety. In the Indian context, integrating such technological solutions is crucial as the country grapples with the ethical and legal implications of synthetic media.

While existing regulations, such as the Information Technology Act, 2000, provide a foundation for addressing some of these challenges, the rapid advancement of AI technologies necessitates the proactive adoption of innovative solutions. The upcoming Digital Personal Data Protection Act (DPDPA) should also consider incorporating provisions that promote the development and deployment of technological solutions for privacy protection (Government of India, 2023). On a global scale, the application of these technologies reflects a growing recognition of the need for collaboration between technologists, lawmakers, and ethicists to develop frameworks that can adapt to the fast-evolving landscape of synthetic media.

Countries that prioritize investment in these technological solutions are better positioned to protect individual privacy while fostering innovation in AI and digital content creation. In summary, leveraging technological solutions such as watermarking, consent management systems, and AI detection tools offers promising avenues for enhancing privacy protection in the context of synthetic media. As synthetic media technologies continue to advance, a multifaceted approach that combines legal frameworks with technological innovations will be essential to safeguard individual rights and promote responsible use of AI-generated content. 17 Danielle Keats Citron, The Imagination of Consent in an Age of Synthetic Media, 134 Harv. L. Rev. 111 (2020), available at https://harvardlawreview. org/2020/01/the-imagination-of-consent-in-an-age-of-syntheticmedia/ (last visited Sept. 26, 2024). 18 T.

Hwang, Y. Wu & Y. Zhang, Detecting Deepfake Videos Using Machine Learning, 50 Int'l J. Info. Mgmt. 25 (2020), available at https://www. sciencedirect. com/science/article/pii/S0268401219304793 (last visited Sept. 26, 2024).

The Future of Privacy in the Age of Synthetic Media As synthetic media technology continues to advance, the implications for privacy and personal data protection will undoubtedly expand, necessitating forward-thinking strategies and frameworks. The future of privacy in this landscape will depend on a combination of robust legal measures, technological innovations, and ongoing societal discourse surrounding ethics and consent.

1 Evolving Legal Frameworks

One significant trend likely to shape the future of privacy in the context of synthetic media is the evolution of legal frameworks. As awareness of the risks posed by AI-generated content increases, lawmakers worldwide will need to adapt existing regulations to address these challenges specifically. Countries are expected to create comprehensive laws that encompass not only data protection but also specific provisions regarding synthetic media. The integration of concepts such as algorithmic accountability— where platforms must ensure their AI systems operate transparently and ethically—could become essential in shaping regulations (Ghosh, 2021)19. For instance, the European Union20 is considering amendments to the Digital Services Act to include provisions specifically targeting synthetic media, ensuring that platforms take responsibility for the content they host.

Meanwhile, India must also prioritize similar reforms in the DPDPA, recognizing the urgent need to address the unique risks posed by synthetic media technologies in its rapidly digitizing landscape.

2 Increased Public Awareness and Education

In parallel with legal advancements, public awareness and education will play a vital role in the future of privacy concerning synthetic media. As society becomes more familiar with the potential risks associated with synthetic media, individuals will be better equipped to make informed decisions about their data and privacy. Initiatives aimed at educating the public about recognizing synthetic media, understanding consent, and managing personal data are essential. By fostering a culture of digital literacy, individuals can navigate the complexities of the digital landscape more effectively, thus reinforcing their rights.

3 Ethical AI Development and Collaboration

The future of privacy in the age of synthetic

19 S. Ghosh, Algorithmic Accountability

A New Frontier for Data Protection in the Age of AI, 4 J. Data Prot. & Privacy 139 (2021), available at https://www. henrystewartpublications. com/jdpp (last visited Sept. 26, 2024). 20 European Commission, Proposal for a Regulation of the European Parliament and of the Council on a Single Market for Digital Services (Digital Services Act) (2020), available at https://ec. europa. eu/info/publications/proposal-regulation-digital-services-act_en (last visited Sept. 26, 2024). media also hinges on ethical AI development. Organizations, technologists, and regulators must collaborate to create ethical guidelines that prioritize user privacy and consent. By fostering partnerships among academia, industry, and government, a more holistic approach to AI development can be achieved.

These collaborations can lead to the establishment of standards and best practices for the ethical use of synthetic media technologies, emphasizing respect for individual rights and societal values. Furthermore, there is a growing push for auditable AI systems, where organizations are held accountable for the outcomes of their AI technologies. Such systems would enable stakeholders to track how AI-generated content is created and utilized, thus enhancing transparency and accountability (Zarsky, 2019)21.

4 Technological Innovation and Privacy by Design

Technological innovation will also play a pivotal role in the future of privacy in synthetic media. The concept of Privacy by Design, which advocates for embedding privacy considerations into the design phase of technology, will become increasingly relevant. By prioritizing privacy from the outset, developers can create tools and platforms that minimize the risks associated with synthetic media and enhance user control over their personal information. In India, incorporating such principles into technology development can help mitigate privacy risks and establish a precedent for responsible innovation. In conclusion, the future of privacy in the age of synthetic media is at a crucial crossroads, influenced by evolving legal frameworks, public awareness, ethical AI development, and technological innovation.

By adopting a multifaceted approach that encompasses legal, educational, and ethical considerations, societies can navigate the complexities of synthetic media while safeguarding individual privacy and promoting responsible use of AI technologies. Conclusion: Charting a Path Forward for Privacy and Synthetic Media The intersection of privacy and synthetic media presents a complex landscape characterized by rapid technological advancements, evolving legal frameworks, and growing societal awareness. As AI-generated content continues to permeate various aspects of life—from entertainment to politics—the need for effective privacy protections becomes increasingly paramount. 21 T. Zarsky, AI and the Future of Privacy: The Algorithmic Paradox, 32 Harv. J. L. & Tech. 267 (2019), available at https://jolt. law. harvard. edu/assets/article/AI-and-the-Future-of-Privacy. pdf (last visited Sept.

26, 2024).

This exploration of the global and Indian contexts highlights the diverse approaches to regulating synthetic media while underscoring the pressing need for comprehensive legal frameworks. While the European Union22 has made significant strides through regulations like the GDPR, the United States remains fragmented in its approach, with state-specific laws addressing aspects of synthetic media. In contrast, India faces the challenge of establishing robust regulatory mechanisms that cater to its unique socio-legal landscape. The role of technological solutions cannot be overstated. Innovations such as watermarking, consent management systems, and AI detection tools present promising avenues for enhancing privacy protection in synthetic media.

As these technologies evolve, they offer the potential to empower users, ensuring that consent is prioritized, and unauthorized use of personal data is minimized23. However, the future of privacy in the age of synthetic media is not solely reliant on legal and technological advancements. Increasing public awareness and education about the implications of synthetic media are critical for fostering a digitally literate society that can navigate the complexities of data protection. As individuals become more informed about their rights and the risks associated with synthetic media, they can take proactive measures to safeguard their privacy. Moreover, ethical AI development and collaboration among stakeholders are essential for creating responsible frameworks that prioritize individual rights.

By fostering partnerships between technologists, regulators, and civil society, we can establish standards and best practices that ensure the ethical use of synthetic media technologies24. 22 European Commission, Guidelines on the Application of the GDPR in Relation to Artificial Intelligence and Data Protection (2020), available at https://ec. europa. eu/info/publications/gdpr-and-ai (last visited Sept. 26, 23 Danielle Keats Citron, The Imagination of Consent in an Age of Synthetic Media, 134 Harv. L. Rev. 111 (2020), available at https://harvardlawreview. org/2020/01/the-imagination-of-consent-in-an-age-of-syntheticmedia/ (last visited Sept. 26, 2024). 24 T. Zarsky, AI and the Future of Privacy: The Algorithmic Paradox, 32 Harv. J. L. & Tech. 267 (2019), available at https://jolt. law. harvard. edu/assets/article/AI-and-the-Future-of-Privacy. pdf (last visited Sept. 26, 2024).

REFERENCES

1. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1.

2. European Commission, Guidelines on the Application of the GDPR in Relation to

Artificial Intelligence and Data Protection (2020), available at https://ec.europa.eu/info/publications/gdpr-and-ai (last visited Sept. 26, 2024).

3 World Economic Forum, Deepfakes and Synthetic Media

Reality, Impacts, and Regulation (2020), available at https://www.weforum.org/reports/deepfakes-andsynthetic-media (last visited Sept. 26, 2024).

4. Cal. Civ. Code § 1798.100 (2018) (California Consumer Privacy Act).

5. Government of India, Digital Personal Data Protection Act (DPDPA) (2023), available

at https://www.meity.gov.in (last visited Sept. 26, 2024).

6. European Commission, Guidelines on the Application of the GDPR in Relation to

Artificial Intelligence and Data Protection (2020), available at https://ec.europa.eu/info/publications/gdpr-and-ai (last visited Sept. 26, 2024).

7 California Legislative Information, California AB-602

Deepfakes Law (2021), available at https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202120220AB60

2 (last visited Sept. 26, 2024).

8. Government of India, Digital Personal Data Protection Act (2023), available at

https://www.meity.gov.in (last visited Sept. 26, 2024).

9. European Commission, Guidelines on the Application of the GDPR in Relation to

Artificial Intelligence and Data Protection (2020), available at https://ec.europa.eu/info/publications/gdpr-and-ai (last visited Sept. 26, 2024).

10 California Legislative Information, California AB-602

Deepfakes Law (2021), available at https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202120220AB60

2 (last visited Sept. 26, 2024).

11. European Commission, Guidelines on the Application of the GDPR in Relation to

Artificial Intelligence and Data Protection (2020), available at https://ec.europa.eu/info/publications/gdpr-and-ai (last visited Sept. 26, 2024).

12 California Legislative Information, California AB-602

Deepfakes Law (2021), available at https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202120220AB60

2 (last visited Sept. 26, 2024).

13. State Council of China, Regulations on the Management of Deep Synthesis Technology

(2019), available at http://www.gov.cn/zhengce/content/2019- 12/19/content_5455241.htm (last visited Sept. 26, 2024).

14 Bobby Chesney & Danielle Keats Citron, Deep Fakes

A Looming Challenge for Privacy, Democracy, and National Security, 71 Stan. L. Rev. Online 1 (2019), available at https://www.stanfordlawreview.org/online/deep-fakes/ (last visited Sept. 26, 2024).

15. Danielle Keats Citron, The Imagination of Consent in an Age of Synthetic Media, 134

Harv. L. Rev. 111 (2020), available at https://harvardlawreview.org/2020/01/theimagination-of-consent-in-an-age-of-synthetic-media/ (last visited Sept. 26, 2024).

16. T. Hwang, Y. Wu & Y. Zhang, Detecting Deepfake Videos Using Machine Learning,

Int'l J.

Info. Mgmt. (2020), available at https://www.sciencedirect.com/science/article/pii/S0268401219304793 (last visited Sept. 26, 2024).

17 S. Ghosh, Algorithmic Accountability

A New Frontier for Data Protection in the Age of AI, J.

Data Prot. & Privacy (2021), available at https://www.henrystewartpublications.com/jdpp (last visited Sept. 26, 2024).

18. European Commission, Proposal for a Regulation of the European Parliament and of

the Council on a Single Market for Digital Services (Digital Services Act) (2020), available at https://ec.europa.eu/info/publications/proposal-regulation-digital-servicesact_en (last visited Sept. 26, 2024).

19 T. Zarsky, AI and the Future of Privacy

The Algorithmic Paradox, 32 Harv. J.L. & Tech. 267 (2019), available at https://jolt.law.harvard.edu/assets/article/AI-and-the- Future-of-Privacy.pdf (last visited Sept. 26, 2024).

20. European Commission, Guidelines on the Application of the GDPR in Relation to

Artificial Intelligence and Data Protection (2020), available at https://ec.europa.eu/info/publications/gdpr-and-ai (last visited Sept. 26, 2024).

21. Danielle Keats Citron, The Imagination of Consent in an Age of Synthetic Media, 134

Harv. L. Rev. 111 (2020), available at https://harvardlawreview.org/2020/01/theimagination-of-consent-in-an-age-of-synthetic-media/ (last visited Sept. 26, 2024).

22 T. Zarsky, AI and the Future of Privacy

The Algorithmic Paradox, 32 Harv. J.L. & Tech. 267 (2019), available at https://jolt.law.harvard.edu/assets/article/AI-and-the- Future-of-Privacy.pdf (last visited Sept. 26, 2024).