Revenge porn legislation
· 10 min read
1. The harm baseline
The Cyber Civil Rights Initiative's surveys of victims (Eaton et al., 2017) found that 51% had contemplated suicide, 47% experienced job-search interference, and over 90% reported significant emotional distress. The harm profile is similar to sexual assault in its psychological dimensions and exceeds it in one specific way: the image is permanent and infinitely reproducible. A survivor of physical assault is not re-victimized when a stranger views her in 2031; a non-consensual intimate image victim is. This duration-and-replicability dimension is what made older doctrines (assault, harassment, IIED) inadequate: those addressed acts, not artifacts. The legislative response had to target the artifact's continued circulation, which is why takedown obligations and hash-matching are as important as criminal penalties.2. Why existing doctrines failed
Before specific legislation, victims tried copyright (often available if they took the photo themselves but requires registration for damages and does not reach selfies taken by someone else), defamation (fails because the image is true), intentional infliction of emotional distress (high bar, slow), invasion of privacy (state-specific, generally limited to private facts not voluntarily disclosed), and harassment statutes (require ongoing course of conduct rather than single publication). None reliably worked. The 2014 Hunter Moore prosecution (operator of IsAnyoneUp.com) used federal computer-fraud statutes to reach the photographer who hacked accounts but did not address publication itself. The doctrinal gap forced the development of dedicated statutes.3. The Franks template and its features
Mary Anne Franks drafted a model statute through the Cyber Civil Rights Initiative that became the template for most state laws. Key features: the prohibited act is disclosure of an intimate image without the depicted person's consent; the image must show specified body parts or sexual conduct; the depicted person must have had a reasonable expectation of privacy; the perpetrator must know or reasonably should know that disclosure causes harm; certain narrow exceptions apply (law enforcement, medical, public interest). The model was iterated through First Amendment challenges. Vermont's adapted version survived in State v. VanBuren (2019) under intermediate scrutiny; Illinois's in People v. Austin (2019); Texas's earlier broad statute was struck in Ex parte Jones (2018) for being overbroad in not requiring intent to harm.4. The First Amendment fight
Free-speech advocates initially opposed broad statutes, arguing that truthful images of newsworthy subjects are protected speech. The narrower argument — that consent to creation in private intimacy is categorically different from consent to public distribution, that the privacy interest is compelling, and that properly drafted statutes target unprotected conduct rather than ideas — was accepted by most appellate courts by 2020. The Supreme Court has not directly addressed the question, but its general framework treating privacy interests as cognizable First Amendment counterweights (Bartnicki v. Vopper, Florida Star v. B.J.F.) leaves room for narrowly tailored statutes. The fight illustrates how a new harm category enters constitutional law: drafting refinements rather than wholesale doctrinal change.5. Federal civil cause of action: §6851
The Violence Against Women Act Reauthorization of 2022 added a federal civil cause of action allowing victims to sue for damages, attorney's fees, and injunctive relief, with limited statutory damages of $150,000. The remedy is civil, not criminal, so it does not displace state criminal law; it adds a federal forum that can reach interstate conduct and provide consistent baseline relief. Victims previously had to litigate under whichever state's law applied, with very different available damages. The federal floor is meaningful, though attorney representation remains the limiting factor; most victims still cannot afford to sue.6. TAKE IT DOWN Act (2025)
The federal TAKE IT DOWN Act, signed in 2025, made it a federal crime to publish non-consensual intimate imagery — including AI-generated synthetic imagery — and obligated covered online platforms to remove reported content within 48 hours of a valid takedown request from the depicted person or their representative. The platform-obligation component is what distinguishes it from prior law: §6851 lets victims sue distributors, but TAKE IT DOWN compels platforms to act regardless of distributor identity. Civil-liberties groups raised concerns about over-removal driven by automated compliance with bad-faith takedowns; the statute includes a counter-notification process, but the equilibrium is still being worked out.7. The platform-takedown infrastructure
The technical layer enabling fast takedown is hash-matching. StopNCII.org, operated by the UK Revenge Porn Helpline with industry partners, lets a victim hash-fingerprint an image on her own device (the original never leaves her possession) and submit the hash to participating platforms (Meta, TikTok, Bumble, OnlyFans, Pornhub, others). The platforms then block uploads matching the hash. The system has processed hundreds of thousands of hashes since 2021. Limitations: requires victim to possess the image, hash-evasion through cropping or filtering remains possible (though perceptual-hash improvements help), and non-participating platforms (smaller pornography aggregators, foreign-hosted sites) remain untouched.8. Sextortion as a related harm
Sextortion — extorting money, additional images, or sexual contact by threatening to release intimate images — is increasingly the dominant operational form. FBI data shows a sharp increase in financial sextortion against teenage boys since 2022, with offenders typically operating from West Africa or Southeast Asia. The conduct is reachable under existing extortion statutes, but the international and platform-mediated nature limits effective response. NCMEC's CyberTipline and the FBI's IC3 receive reports; many cases end in suicide before report. The 2024 Take It Down push specifically addressed minor sextortion through age-tailored takedown processes. Education, parental tools, and platform proactive detection (image analysis on first message from strangers to minors) are the operational layer beyond law.9. Coercive creation
A related but distinct harm is image-based sexual coercion: a partner pressures or threatens a person to produce intimate images for him. The creation itself is the wrong, not just any later distribution. Most jurisdictions reach this only indirectly through coercion or assault statutes. Some recent statutes (e.g., the UK's Online Safety Act 2023, parts of Australian state law) specifically address coerced creation. The collective gap is that the legal scaffolding focuses on the distribution endpoint and under-addresses the upstream coercion that produces some of the images in the first place.10. International fragmentation
Different jurisdictions reach different conduct. The UK criminalizes non-consensual distribution under the Criminal Justice and Courts Act 2015 §33 and threats to share under the Online Safety Act 2023. The Philippines (2009 Anti-Photo and Video Voyeurism Act) was an early adopter. South Korea's response to molka spy-cam crime expanded in 2018–2020. Germany criminalizes under §201a StGB. The EU's Digital Services Act creates platform obligations. Many jurisdictions still lack specific statutes, and host countries for hostile sites (operators historically have used jurisdictions with weak enforcement) shape what is reachable. International victim-services coordination through INHOPE and EUROPOL's Internet Referral Unit fills some gaps.11. The structural-platform problem
Specialty "revenge porn" sites — Anon-IB, IsAnyoneUp, Pornhub's user-upload features in their pre-2020 form — were designed around the conduct. Hunter Moore's IsAnyoneUp solicited submissions of non-consensual images and added the subject's full name and social media. Moore was prosecuted in 2015 under federal computer-fraud statutes for the hacking component. The category of site has not disappeared; it has fragmented and moved to harder-to-reach hosts. The structural question is whether platforms whose business model depends on non-consensual content can be held liable, beyond individual takedowns, for the design itself. FOSTA-SESTA shows one model; whether it generalizes is contested.12. The reframing: from victim shame to perpetrator crime
The deepest collective shift the legislation encodes is the reframing of who carries the shame. The "if you didn't want it shared you shouldn't have taken it" reflex puts the moral weight on the subject; the modern legal frame puts it on the distributor. This parallels the consent-based reframe of rape law and is part of the same long collective project: separating responsibility for an intimate act from blame for its violation. The frame transmits slowly through culture — jury instructions still need to caution against subject-shaming, employers still over-fire victims rather than supporting them, families still treat the victim as the embarrassment. But the doctrine has crossed; the culture is finishing the journey. Law 5 is what happens when doctrine outruns culture, and the law itself becomes a tool to teach the culture forward.Citations
1. Franks, Mary Anne. "Drafting an Effective 'Revenge Porn' Law: A Guide for Legislators." Cyber Civil Rights Initiative, 2015 (revised 2016). 2. Franks, Mary Anne. The Cult of the Constitution. Stanford: Stanford University Press, 2019. 3. Citron, Danielle Keats. The Fight for Privacy: Protecting Dignity, Identity, and Love in the Digital Age. New York: W.W. Norton, 2022. 4. Citron, Danielle Keats, and Mary Anne Franks. "Criminalizing Revenge Porn." Wake Forest Law Review 49 (2014): 345–391. 5. Eaton, Asia A., Holly Jacobs, and Yanet Ruvalcaba. 2017 Nationwide Online Study of Nonconsensual Porn Victimization and Perpetration. Cyber Civil Rights Initiative, 2017. 6. Goldberg, Carrie. Nobody's Victim: Fighting Psychos, Stalkers, Pervs, and Trolls. New York: Plume, 2019. 7. Park, Sandra S. "ACLU Comment on Revenge Porn Legislation and the First Amendment." American Civil Liberties Union, 2014. 8. State v. VanBuren, 214 A.3d 791 (Vt. 2019). 9. People v. Austin, 155 N.E.3d 439 (Ill. 2019). 10. Violence Against Women Act Reauthorization Act of 2022, Pub. L. No. 117-103, §1309; codified at 15 U.S.C. §6851. 11. Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act (TAKE IT DOWN Act), Pub. L. No. 119-XX (2025). 12. Criminal Justice and Courts Act 2015, c. 2, §33 (UK).
◆
Cite this:
Comments
·
Sign in to join the conversation.
Be the first to share how this landed.