XIRA

California Deepfake Pornography Expansion (AB 621)

CAFor all AI companiesMediumseverityIn effect

In effect since

Overview

Expands civil remedies for non-consensual deepfake pornography. Broadens definitions, adds liability for deepfake pornography service operators, and provides up to $250,000 for malicious violations. Minors cannot consent to creation or distribution.

This is an AI-specific state law.

California AI regulation guide lists every tracked rule for this jurisdiction with timelines and obligation tallies.

Who this applies to

This regulation applies to both companies that build AI products and companies that use AI tools from other vendors.

AI categories covered

  • Consumer-facing AI
  • General purpose AI

Specific AI use cases:

  • Content generation

What this requires you to do

  • Prohibited practices

    Prohibited practices. Review this obligation in the source text.

  • Consent required

    Obtain consent. Get explicit permission from individuals before collecting or using their data with AI.

    Obligation explainer: Consent

Enforcement and penalties

Up to $250,000 for malicious violations. Statutory damages available. Private right of action.

This regulation includes a private right of action, which means individuals can file lawsuits directly. This significantly increases litigation risk.

Legislative history

How this law got here

  1. Latest

    effective

    Takes effect

  2. signed

    Signed by Governor Newsom

    View source →

    Earliest

Source

Read the full text

https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB621

Last verified: April 9, 2026

Always verify current language and amendments at the official source.

Other California regulations

Explore more rules in the same jurisdiction that may apply to your AI systems.

Want to know what else applies to your company?

Run a free XIRA scan to see all regulations that match your states and AI tools.

Start your free scan