Get the App

Chapter 9 of 12

Module 9: Authenticity, Ethics, and Legal Basics for Your Online Image

Understand the ethical and legal landscape around personal branding today, including privacy, data use, deepfakes, and AI-generated images of yourself.

15 min readen

1. Why Authenticity Matters More in the Age of AI

In earlier modules, you learned how to show up on video (Module 7) and how to use AI as a helper (Module 8). Now we zoom out: What does it mean to be *authentic* and *ethical* when almost anything online can be faked or AI‑generated?

Key idea

Your personal brand is not just how good your content looks. It’s how much people trust you.

Today (early 2026):

  • AI can create realistic photos and videos of people who never existed.
  • “Virtual influencers” (AI characters) have millions of followers.
  • Deepfakes can copy someone’s face, voice, and style.

Because of this, audiences expect:

  • Transparency – being honest when something is edited, sponsored, or AI‑generated.
  • Consistency – your values and behavior match across platforms.
  • Respect – you don’t misuse other people’s images, voices, or data.

Think of authenticity as: “What I present online matches who I really am and what I really do.”

In this module you’ll learn:

  • What “authentic and transparent” looks like in practice.
  • Basic privacy and data rules in the US and EU that affect your content.
  • How to handle AI images, deepfakes, and digital replicas ethically.
  • How to write your own disclosure guideline for your content.

2. Spot the Authentic vs. Shady Scenario

Read these two short scenarios and reflect.

Scenario A

Lena posts a perfect selfie with the caption: “Quick snap before school!” She used a heavy AI filter that:

  • Smoothed her skin
  • Changed her eye color
  • Slightly reshaped her jawline

She never mentions the filter.

Scenario B

Jay shares a reel and writes:

> “Tried an AI filter to see myself with purple hair and smoother skin. This isn’t how I actually look, but it’s fun. Real face in the next slide.”

Your task (write your answers somewhere):

  1. Which scenario feels more authentic? Why?
  2. In which scenario would you trust the creator more over time?
  3. If you were a brand looking for a partner, which person would you choose, and why?

> Hint: Authenticity is not “no filters ever.” It’s being honest about what you’re changing so people aren’t misled.

3. Basics of Privacy & Data Rights (US vs EU, 2026 Snapshot)

You don’t need to be a lawyer, but you do need a basic map of the rules.

3.1 In the European Union (EU)

1. GDPR (General Data Protection Regulation)

In force since 2018, still the main EU privacy law in 2026.

  • Protects personal data (anything that can identify a person: name, photo, IP address, etc.).
  • Gives people rights like:
  • Access: ask what data a company has about them.
  • Correction: fix wrong data.
  • Deletion: in some cases, ask for data to be erased.
  • Requires clear consent for many types of data use.

2. EU Digital Services Act (DSA)

Fully in force since 2024.

  • Affects major platforms (like social media) more than individual users, but it shapes your environment.
  • Pushes platforms to:
  • Be more transparent about recommendation systems (like For You feeds).
  • Take action on illegal content (including some deepfakes or harmful impersonations).

3. EU AI Act

Adopted in 2024 and entering into force in stages; by 2026, rules are starting to bite for some AI systems.

  • Requires transparency when people interact with AI systems.
  • Includes rules around deepfakes and AI‑generated content, such as obligations to label AI‑generated or manipulated content in many cases.

3.2 In the United States (US)

The US does not have one single federal privacy law like GDPR (as of early 2026). Instead:

  • State laws: Several states have strong privacy laws, e.g.:
  • California (CCPA/CPRA)
  • Virginia, Colorado, Connecticut, Utah, and others
  • These laws often give people rights to:
  • Know what data is collected
  • Opt out of certain data sales or targeted ads

There have been national debates and proposals (like the American Data Privacy and Protection Act), but no single nationwide law has passed yet.

What this means for you as a creator

  • Be careful with personal data you collect (emails, names, faces in your videos).
  • Get permission when using other people’s images or private info, especially if they are clearly identifiable.
  • Assume your audience has some rights over how their data is used, especially if they are in the EU or in US states with privacy laws.

You don’t need to memorize law names, but remember: privacy and consent are not just “nice”; they’re legal expectations in many places.

4. Quick Check: Privacy Basics

Answer this question to check your understanding.

Which statement is MOST accurate in early 2026?

  1. The EU has strong, unified privacy rules (like GDPR), while the US mainly has a mix of state-level privacy laws and debates about a national law.
  2. The US has a single national privacy law stronger than GDPR, and the EU has no unified privacy rules.
  3. Neither the EU nor the US has any real privacy laws yet; it’s all just platform policies.
Show Answer

Answer: A) The EU has strong, unified privacy rules (like GDPR), while the US mainly has a mix of state-level privacy laws and debates about a national law.

The EU has GDPR, a strong unified privacy law, plus newer rules like the DSA and AI Act. The US still relies on a patchwork of state laws and ongoing debates about a single national privacy law.

5. AI Personas, Deepfakes, and Digital Replicas

Now let’s look at AI-generated people and copies of real people.

5.1 AI Personas & Virtual Influencers

These are characters created by humans but powered by AI.

  • They may use AI to generate their faces, voices, or posts.
  • Brands sometimes use them because they’re always on, never age, and are easy to control.

Ethical expectations:

  • Clearly say when an influencer is not a real human.
  • Don’t pretend an AI persona has real experiences (like “my childhood” or “my mental health struggles”) if they don’t.

5.2 Deepfakes

A deepfake is media (usually video or audio) where AI makes it look or sound like someone did or said something they never did.

  • Example: A video that shows a celebrity promoting a product they never agreed to.
  • Deepfakes can be fun (face swap memes) but also harmful (fake nudes, political lies, scams).

Many countries are updating laws to handle this. For example:

  • The EU AI Act includes transparency rules for deepfakes.
  • Several US states have laws against deepfake porn or election-related deepfakes.

5.3 Digital Replicas of Yourself

You can now:

  • Make an AI avatar that looks like you.
  • Clone your voice.
  • Let tools generate new videos of “you” saying things you never recorded.

Key risks:

  • People might not know when it’s really you vs. your AI clone.
  • Someone else might create a fake “you” without permission.

Key protections (vary by country/state):

  • Right of publicity / image rights: control how your name, image, or voice is used commercially.
  • Consent and contracts: written agreements that say what others can and cannot do with your likeness.

Rule of thumb:

If you are using AI to copy someone’s face, voice, or style, you should:

  1. Have their clear permission.
  2. Label the content as AI‑generated or altered.
  3. Avoid uses that could damage their reputation or mislead people.

6. Would You Post This? Deepfake & AI Image Scenarios

Imagine these situations and decide what you would do.

Situation 1: The “Funny Teacher” Deepfake

You find a tool that can put your teacher’s face into movie clips. You create a video of your teacher as a superhero. It looks very real.

Ask yourself:

  • Do I have their permission?
  • Could this embarrass them or harm their reputation?
  • Would viewers clearly see it as a joke and AI‑edited, or might they think it’s real?

Would you post it? What would you change to make it more ethical?

---

Situation 2: AI‑Perfected Selfie

You use an app to:

  • Remove all blemishes
  • Make your eyes bigger
  • Slim your face

You want to post: “No makeup, just woke up like this.”

Ask yourself:

  • Is this truthful, or is it misleading?
  • How might this affect followers’ body image or self‑esteem?
  • Could I still use the filter but be honest about it?

Rewrite the caption in a more transparent way. For example:

> “Tried an AI beauty filter because I was curious. Real skin in the next slide.”

Write your own version that feels honest but still “on brand” for you.

7. Using Others’ Content or Likeness: Consent & Credit

Your personal brand often includes other people (friends, classmates, teachers) and other people’s content (music, memes, clips).

7.1 People in Your Content

Likeness = someone’s face, voice, or anything that clearly identifies them.

Best practice:

  • Ask before you post if someone is clearly recognizable.
  • Respect “no” or “please take that down”.
  • Be extra careful with children and anyone in a vulnerable situation.

In many places, using someone’s image commercially (like in an ad or paid post) without permission can violate their image rights or right of publicity.

7.2 Using Others’ Creative Work

This includes:

  • Music
  • Video clips
  • Photos
  • Artwork
  • Writing

Key ideas:

  • Copyright: The creator usually owns the rights to their work.
  • Licenses: Some works (like Creative Commons) can be reused under certain conditions.

Basic rules:

  • Don’t assume you can use anything just because it’s online.
  • Check platform tools (e.g., built‑in music libraries) which often include licensed tracks.
  • When in doubt, give credit and link back to the original.

7.3 What About AI‑Generated Stuff?

AI art or images often raise questions:

  • Who owns it? (This is still being debated in many countries.)
  • Was the AI trained on other artists’ work without permission?

Ethical approach:

  • Be open that it’s AI‑generated.
  • Avoid claiming you did all the creative work if an AI tool did most of it.
  • Don’t use AI to copy a specific artist’s style in a way that replaces or harms them.

Simple checklist before posting content with others:

  1. Do I have permission from the people shown or heard?
  2. Am I respecting their privacy and safety?
  3. Do I have the right to use this music / image / clip?
  4. Did I credit where needed?
  5. Is anything AI‑generated or edited clearly labeled?

8. Flashcards: Key Terms You Should Know

Use these flashcards to review important concepts from this module.

Authenticity (in personal branding)
Presenting yourself online in a way that matches who you really are, what you actually do, and what you truly believe, instead of pretending or misleading.
Transparency
Being open and honest about important details that affect how people understand your content, such as sponsorships, AI use, heavy edits, or paid promotions.
Personal data
Any information that can identify a person, directly or indirectly (e.g., name, photo, email, IP address, face in a video).
GDPR
The EU’s main privacy law (in force since 2018) that gives people strong rights over their personal data and sets rules for how organizations collect and use it.
Deepfake
Audio, image, or video that uses AI to make it look or sound like someone did or said something they never actually did or said.
Digital replica
An AI-generated version of a real person’s face, voice, or behavior that can create new content as if it were that person.
Likeness / right of publicity
A legal concept (especially in the US) that gives people control over how their name, image, and voice are used, especially for commercial purposes.
Consent
Clear, informed agreement from a person to be recorded, shown, or have their data used in a particular way.

9. Scenario Quiz: Is This Okay to Post?

Test how well you can spot ethical and legal issues.

You use an AI tool to create a super realistic image of your friend dancing at a party they never attended. You plan to post it with the caption: “Last night was wild 😂” to get laughs. What is the BEST action?

  1. Post it as planned. It’s obviously a joke, so no problem.
  2. Ask your friend for clear permission, label the image as AI-generated, and be ready not to post if they are uncomfortable.
  3. Post it but block your friend so they don’t see it.
Show Answer

Answer: B) Ask your friend for clear permission, label the image as AI-generated, and be ready not to post if they are uncomfortable.

Using someone’s likeness in an AI-generated, realistic scenario can affect their reputation and privacy. The ethical choice is to get their informed consent and be transparent that it’s AI-generated—or not post at all if they’re not okay with it.

10. Draft Your Personal Disclosure Guideline

Now it’s your turn to create a simple rule for yourself.

Your guideline should cover at least:

  1. AI use – When will you say that AI helped you?
  2. Edits/filters – When will you mention heavy edits or beauty filters?
  3. Sponsorships/free stuff – How will you tell people when you’re being paid or rewarded?

Step 1: Choose your style

Decide how formal or casual you want to sound. Examples:

  • Casual: “Real talk:”, “BTW:”
  • Neutral: “Disclosure:”, “Note:”

Step 2: Fill in this template

Copy this template and customize it for yourself:

```text

My disclosure rule:

  1. AI use:

Whenever I use AI to write, edit, or create images or videos that I post, I will say so in the caption or description. Example: “Caption helped by AI” or “Image generated with AI.”

  1. Filters and heavy edits:

If I use strong beauty filters or change how my body or face looks, I will mention it and, when possible, share at least one unfiltered or lightly edited version.

  1. Sponsorships and gifts:

If I get paid, get free products, or have any special deal that might influence what I say, I will clearly label the content (for example: “Ad,” “Paid partnership,” or “Gifted”).

I’m choosing this rule because I want people to trust that what they see from me is honest and not secretly manipulated.

```

Step 3: Add one personal touch

Add one extra line that matters to you. For example:

  • “I won’t use AI to fake quotes from real people.”
  • “I won’t post AI images that could make others feel bad about their bodies without saying they’re AI.”
  • “I will take down content if someone featured in it asks me to.”

Write your final version somewhere you can actually see it when you create content (notes app, notebook, or pinned post).

Key Terms

GDPR
The General Data Protection Regulation, the European Union’s main privacy law that sets strict rules for handling personal data and gives individuals strong rights.
Consent
Clear and informed agreement from someone to be recorded, shown, or have their data or likeness used in a particular way.
Deepfake
Media created or altered with AI to realistically show someone doing or saying something they never actually did or said.
EU AI Act
A European Union law adopted in 2024 that regulates certain AI systems, including transparency requirements for deepfakes and AI-generated content, rolling out in stages.
Disclosure
A statement that clearly informs your audience about important facts, such as that content is sponsored, AI-generated, or heavily edited.
Authenticity
Presenting yourself online in a way that is honest and consistent with your real values, actions, and identity.
Transparency
Openly sharing important information that affects how people interpret your content, such as AI use, sponsorships, and heavy edits.
Personal data
Any information that can identify a person directly or indirectly, such as names, photos, email addresses, and faces in videos.
Digital replica
An AI-generated version of a real person’s likeness or voice that can be used to create new content as if it were that person.
Digital Services Act (DSA)
An EU law that increases transparency and accountability for online platforms, including how they handle illegal content and recommendation systems.
Right of publicity / image rights
Legal rights (especially in the US and many other regions) that give a person control over commercial use of their name, image, or voice.