THE LEGAL CHALLENGES OF DEEPFAKES TECHNOLOGY IN SOUTH AFRICA: Isthe Current Legal Framework Adequate?

1.Introduction

Imagine waking up to discover a video of yourself circulating online in which you appear to confess to a crime you never committed. Thousands of people believe it before experts prove it was generated using artificial intelligence. By then, the news outlets may have already been reporting the incident, which places you under intense public scrutiny and by the time the actual truth finally emerges, public perception may already have been shaped by the false video.

Deepfake technology introduces significant legal challenges because it undermines the foundational protection of human and personality rights. One of these rights being the rights to dignity which everyone in South Africa is guaranteed of¹ _.This happens as victims often face severe reputational damage through such fabricated depictions. Deepfakes are artificial intelligence generated or manipulated audio recordings, images or videos that credibly portray people doing or saying things that never happened². While it has legitimate applications in education, media production and entertainment, its best application presents a complicated legal challenge that legal frameworks were not particularly made to address or handle³. Although the legal framework in South Africa provides certain forms of protection. Which includes constitutional right and legislation such as the cyber crimes act and the Protection of Personal Information Act⁴ , uncertainty remains in regard to whether these laws address the unique norms passed by deepfake technology in a satisfactory manner .

This article argues that the current legal framework offers partial protection only and requires additional development to successfully control malicious uses of deepfakes while balancing technological innovation and constitutional rights. Therefore South Africa should develop a more comprehensive legal framework to address these challenges.

2.1 Constitutional protection of human dignity, privacy and freedom of expression

The South African constitution of 1996, provides the foundation for protecting people against many of the harms associated with malicious deep fake technology. Section 10 guarantees every citizen the right to human dignity , section 14 protects the rights to privacy and section 16 guarantees the right to freedom of expression⁵. These constitutional rights are specifically relevant where deepfakes shows individuals engaging in conduct that is humiliating, causes damage to their reputation or is false. Even though the constitution does not expressly regulate artificial intelligence or synthetic media, because it is a rights-based it provides an important basis upon which victims may challenge the unlawful creation of harmful  deepfakes.

Despite all these protections by the constitution, significant challenges remain. Broad rights and principles are established by the constitution but it does not however prescribe specific legal mechanisms for addressing AI generated content. A victim of malicious defeat for example may argue that their rights of to dignity and privacy were infringed or violated, yet proving the extent of the harm and getting urgent relief before the false content circulates may prove difficult. The rapid dissemination of defects through digital platforms often outruns legal processes which allows for reputational damage to occur long before an effective remedy can be found. Consequently Constitutional rights alone are not enough to address the unique legal challenges presented by defect technology. Emphasis being on the need for legislation specifically designed to regulate emerging forms of AI generated deceptions. This shows that while the constitution provides essential right-based protection, it was never intended to regulate synthetic media created through artificial intelligence leaving courts to adapt traditional constitutional princeples to a rapidly evolving technological landscape.

2.2 Statutory protection against deepfake harms.

South Africa currently does not have legislation that specifically regulates defect technology. Instead, victims must rely on existing statutes that were enacted before the rapid use of generative artificial intelligence. To name the most relevant of some, there is the protection of personal Information Act 4 of 2013, the cyber crimes act 19 of 2020 and in certain Circumstances, the copyrights acts 98 of 1978, none of these statutes addresses the creation, distribution or misuse of AI generated synthetic media, however they do provide important legal protection, as a result, the application of these laws to deepfakes often depends on interpreting legislation that was not designed with this technology in mind⁶.

POPPIA plays an important role in places where deepfake involves the unauthorized use of someone’s dentifiable voice, picture or other information.This act seeks to protect personal information by regulating how it is collected, processed and shared. Its primary purpose however is the protection of personal data rather than the regulation of manipulated digital content. Consequently questions remain regarding whether POPIA Provides sufficient remedies where deepfake cause reputational coma emotional or societal harm beyond unlawful processing of personal information⁷.

The cybercrime act also offers protection by criminalizing certain online conduct, including the unlawful disclosure of intimate images and other cyber enabled offences⁸. Nevertheless malicious defects may not always fall neatly within the offenses created by the Act, especially where harm arises from misinformation, political manipulation or synthetic media that does not satisfy the statutory requirements of a specific offence. This demonstrates that although existing legislation provides valuable legal remedies, in some circumstances, significant regulatory gaps remain in addressing the broader challenges deepfake technology poses.

3.1 Privacy and reputational harm

When a deepfake circulates, people immediately react to it as if it were true and genuine. In South Africa professionals in this field have had to explain to people and victims that a video recording was fabricated, most times even after clarification, the impression that was created by the fake may still linger. This poses significant risks to public discourse, political processes and personal privacy. Deepfakes have been used multiple times in manipulating elections defame individuals and spread harmful misinformation³.[1]

these implications go above and beyond public figures as private individuals can also be targets of deepfake technology. The emphasis of these risks are on the importance of media integrity and development of detection tools that are advanced enough to flag and counteract the deepfakes before they can cause widespread harm.

3.2 Identity theft and digital impersonation.

Defect technology also facilitates digital impersonification by allowing individuals to make convincing replicas of another person’s appearance or voice without authorization. Such fabricated content may be used to commit fraud, deceive the public or impersonate public officials and business leaders. In 2024, Leanne Manas, an award-winning South African broadcast anchor. Became a victim of deepfakes when her image was used in a fake endorsement of weight loss products and online trading on TikTok and Facebook.⁹

Unlike traditional forms of identity theft AI generated defeat possesses a level of realism capable of convincing even cautious viewers, thereby increasing the potential for financial loss in other forms of harm. Another incident of such worth mentioning was in March 2024 wherein 3 South African investors were tricked into investing in a company called Banxso after they came across a convincing advert seemingly endorsed by Elon Musk, a well known science and tech specialist. It was later discovered on further investigation that Banxso had no relation to the deepfake whatsoever.¹⁰

While legislation  such as cybercrimes Acts criminalizes certain cyber enabled offenses, it does not comprehensively regulate every form of AI generated impersonification¹¹. That is seen as deepfake technology continues to evolve, perpetrators are able to exploit legal uncertainties regarding synthetic media, making prosecution and enforcement increasingly complex¹². This demonstrates the need for legal reforms that specifically recognize malicious AI-generated  impersonification as a distinct regulatory challenge rather than relying solely on existing cybercrime legislation.

3.3 Misinformation and democratic risks.

Beyond individual harm, deepake technology presents broader societal challenges by enabling the rapid spread of misinformation and manipulation of political content. During elections, fabricated videos or audio recordings may be used to mislead voters, undermine confidence in democratic institutions and damage public trust in media¹³. The widespread circulation of convincing synthetic media makes it even more difficult for the public to distinguish between authentic information and manipulated content, thereby threatening the integrity of democratic processes. Even high-ranking political figures including our very own president Cyril Ramaphosa have been a victim of the misuse of AI generated deepfakes, where he was seen endorsing an investment scheme and promising guaranteed profits.¹⁴

Even though the constitution protects freedom of expression, this right is not absolute and must be balanced against constitutional rights including dignity and equality¹⁵ as well as public interest in preventing harmful misinformation. The absence of legislation specifically regulating malicious political deepfakes creates uncertainty regarding the most appropriate legal response. Consequently, South Africa’s existing legal framework may struggle to address the broader societal risks associated with AI generated misinformation while preserving legitimate freedom of expression simultaneously.

4.Critical analysis: is the current legal framework adequate?

The presiding discussion demonstrates that South africa’s existing legal framework provides important protection against some of the harms associated with deepfakes technology. Constitutional rights, common law and statutory provisions are all remedies that collectively offer avenues through which victims may seek a legal redress. However, these measures were developed before this sophisticated artificial agents that is capable of generating highly realistic synthetic media emerged. Consequently, the current legal framework addresses the consequence of harmful conducts rather than the unique technological characteristics of deepfakes themselves.¹⁶

One of the most significant shortcomings of the existing framework is the absence of legislation that specifically regulates the creation of, dissemination and misuse of AI generated synthetic media. While legislation such as the Protection Of Personal Information Act 4 of 2013 and the Cybercrimes act 19 of 2020 may apply in certain circumstances neither of them can expressly address malicious Deepfakes or establishes clear standards for determining liability. This creates legal uncertainty for victims, investigators and courts, particularly where manipulated content causes reputational harm, political misinformation or financial loss without fitting neatly within existing statutory provisions.

Furthermore, the rapid development of AI continues to outpace legislative reform. Deepfakes can be created and distributed globally within minutes, where is legal proceedings often require considerable time before effective remedies are obtained. By the time courts intervene the damage has already been done and there is no way to reverse it. This imbalance highlights the need for a proactive rather than reactive legal framework capable of responding to emerging technological risks while remaining consistent with constitutional rights and the principles of justice.¹

Accordingly, although South africa’s current legal framework provides an important foundation for fundamental rights, it cannot be regarded as fully adequate for addressing the difficult challenges posed by deepfake technology, A more technology specific and comprehensive regulatory approach is therefore needed to provide legal certainty, improve enforcement and ensure effective protection against the evolving misuse of artificial intelligence.

5.Recommendations for reform.

The challenges presented by defect technology shows the need for a more comprehensive legal framework in South Africa, while existing legislation provides some protection, it does not regulate, specifically the creation and dissemination of malicious AI generated content. It is therefore recommended that Parliament consider developing legislation or amending existing laws to address the unique legal risks associated with deepfake technology. Such reforms should provide clear definitions of deepfakes, established liability for their malicious creation and distribution, and creates effective civil and criminal remedies for victims.

In addition, South Africa should adopt mechanisms that promote the rapid removal of harmful deep fake content from online platforms, especially where such infringes constitutional rights or threatens public safety. Greater cooperation between government institutions, technology companies and digital platforms would improve detection and reporting of malicious synthetic media. Public education and digital literacy initiatives should also be strengthened to help people recognize AI generated content and reduce the spread of misinformation. These measures will contribute to a legal framework that better balances technological innovation with the protection of fundamental rights.

Conclusion

Deepfake technology presents one of the most significant legal challenges arising from the rapid advancement of artificial intelligence. As demonstrated throughout this article, malicious deepfakes have the potential to infringe constitutional rights, undermine privacy and dignity, facilitate fraud, and erode public trust through the spread of misinformation. Although South Africa’s current legal framework provides important protection through the Constitution, POPIA, the Cybercrimes Act and other legal remedies, these measures were not specifically designed to regulate AI-generated synthetic media.

This article has argued that the existing legal framework is therefore only partially adequate in addressing the unique challenges posed by deepfake technology. To ensure effective protection against emerging forms of digital deception, South Africa should consider adopting technology-specific legal reforms while remaining committed to constitutional values and responsible innovation. By proactively adapting its legal framework to technological developments, South Africa will be better equipped to protect individuals, strengthen public confidence and respond effectively to the evolving challenges of artificial intelligence.

Bibliography

The constitution of the  Republic of Soth Africa,ss 10,11,14,16

Protection Of Personal Information Act (POPIA)

Cybercrimes Act 19 of 2020

Tayyiba Suliman and Sadia Rezvi, Social media and AI : legal risks and South africa’s response, 18 March 2026, https://www.Cliffedekkerhorfmer.com

Journal of Innovation, Risks and benefits of artificial intelligence ,Sept-Oct 2025.

Pumeza Ndobeni, Legal implications of the misuse of deepfakes on South African social media platforms,1 April 2026.

Synthetic media: navigating the ethical and cybersecurity landscape of AI generated content, https://www.eset.com/za

University of Witswatersrand, Johannesburg, Deepfakes and South African law,3 October 2025, https://www.wits.ac.za

Deepfakes impacts,17 October 2024, https://www.pindrop.com/article/deepfake impacts

https://www.moonstone.co.za ,19 June 2025

Andrew Muray ,information Technology Law 4^th edn,Oxford University Press,2019