Deepfakes created by a coworker on Signal

The combined situation

A current or former coworker has created AI deepfake intimate imagery using your professional photographs from LinkedIn, the company website, or work events. Title VII workplace harassment obligations apply immediately upon employer notification. When this scenario plays out on Signal specifically, removal proceeds through the statutory takedown process under 47 USC 223a combined with the scenario specific response that workplace cases require.

Why this combination is high risk

Signal's zero metadata model is privacy protective for legitimate users but provides no platform side enforcement option for NCII victims. Content can be forwarded to other Signal users without trace. For coworker deepfake cases, professional photographs that are required for work purposes including linkedin and company directories are precisely the high quality face shots that ai nudify and face swap tools use as input.

How removal proceeds

Signal does not have content moderation tooling because of its end to end encryption and zero metadata architecture. Removal of content requires action against the sender directly. Title VII obligations create strong incentives for the employer to take swift action including the employer's parallel investigation, no contact arrangements, and termination authority.