File0001

Deepfake services must not be used for unlawful or harmful purposes, including fraud, impersonation, or defamation. Content creators should use clear disclaimers to ensure trans­ parency and comply with data protection, intellectual property, and industry regulations, stay­ ing updated on evolving legal standards, especially in high-risk areas like privacy and misrep­ resentation. 6.2.1 Implement robust security protocols, including end-to-end encryption, multi-factor au­ thentication (MFA), and strict access control mechanisms, to protect personal data involved in deepfake content creation. Ensure that data storage systems are resilient to breaches and unauthorized access. (PDPL Article 5; Anti-Cyber Crime Law Article 6; AI Ethics Principles – Principle 6) (PDPL Article 19, AI Ethics Principles – Principle 2) 6.2 Data Privacy and Protection 6.1 Regulatory Compliance Deepfakes Guidelines: Mitigating risks while fostering innovation 6.2.2 Develop and maintain an incident response plan to quickly address and mitigate any data breaches or security threats, ensuring minimal impact on personal data integrity. 6.2.3 اSecure consent from individuals or entities before using their data in deepfake content. For long- term contracts, consent may include broad usage rights if specified in the terms. 6.2.4 اMMaintain consent records securely, ensuring they are encrypted and backed up to prevent loss or tampering. Consent management systems should be auditable and compliant with relevant data protec­ tion laws 6.2.5 Provide data subjects with detailed information about how their data will be used, including specific purposes, potential risks, and the broader context of the content’s application 6.2.6 Store consent records in a secure, accessible format, ensuring they are easy to retrieve for audits or legal verification. 6.2.7 اEnsure that personal data is used exclusively for the purposes specified in the consent agreement. Any expansion of the data’s use beyond the original consent requires a new, explicit agreement 6.2.8 Clearly communicate the right to withdraw consent at any time, with a straightforward process in place for individuals to exercise this right. Upon withdrawal, ensure that the data is no longer used and is securely deleted if requested 6.3.1 Maintain detailed records of the deepfake creation process, including data sources, al­ gorithms, tools, and techniques used. Ensure this documentation is version-controlled and in­ cludes the rationale behind methodological choices. 6.3.2 Utilize automated systems for applying watermarks to ensure consistency and prevent accidental omission. These systems should be integrated into the content creation workflow to minimize human error (AI Ethics Principles – Principle 2) (PDPL Articles 4, 7, and 11; AI Ethics Principles – Principle 7) (PDPL Articles 4, 7, and 11; AI Ethics Principles – Principle 2) (PDPL Articles 4, 16 and 18; AI Ethics Principles – Principle 2) (PDPL Article 5) Principles – Principle 6) (PDPL Articles 4, 7, and 11; AI Ethics Principles – Principle 2) A sample consent form can be found in the appendix. 6.3 Transparency and Explainability (PDPL Articles 4, 7, and 11; AI Ethics Principles – Principle 2) Deepfakes Guidelines: Mitigating risks while fostering innovation 6.4.1 Take responsibility for the content generated using deepfake technology and ensure it complies with relevant regulations and standards. 6.4.2 Develop stringent internal guidelines that cover the ethical, legal, and technical standards for deepfake content creation. Ensure these guidelines are regularly updated to reflect best practices and industry standards 6.4.3 Ensure deepfake content is distributed through secure, controlled channels to prevent un­ authorized access or alteration. Implement DRM and secure CDNs to protect content integrity. Violations may lead to penalties, including fines or imprisonment