LexLint.ioBeta

Know the law your code answers to.

Law / United States / Oregon

Unlawful dissemination of an intimate image extended to AI-generated depictions (HB 2299)

ORS 163.472 (amended by 2025 Or. Laws ch. 116 (HB 2299))

In force since .

An AI prohibited practices rule binding public and private bodies.

Obligation class
Prohibition
Audit expectation
none
Setting the rule reaches
General

What it requires

  • Do not knowingly cause the disclosure of an intimate image of another person, including a digitally created, manipulated or altered depiction that is reasonably realistic, with intent to harass, humiliate or injure that person, where the person has not consented and a reasonable person would be harassed, humiliated or injured.
  • A repeat violation is a more serious offense than a first violation.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
NIST AI 600-1
MIT mitigations Draft
  • 1.5Safety Decision Frameworks
  • 3.3Access Management
NIST Privacy Framework
  • CT.PO-P1Policies, processes, and procedures for authorizing data processing (e.g., organizational decisions, individual consent), revoking authorizations, and maintaining authorizations are established and in place.
FINOS AIGF
ETSI EN 304 223
  • 5.1.2-1Business need and security risks written down and assessed before deciding to build an AI system.
  • 5.1.4-5End-users told which uses of the system are prohibited.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.

If you get it wrong

Criminal exposureYes

Criminal exposure note

A first violation is a Class A misdemeanor; a violation by a person with a prior conviction under this section is a Class C felony.

What it makes you log

Logging duty

Section 163.472 defines and grades the offense of unlawfully disseminating an intimate image, including a digitally created or AI-generated one; it creates no duty for any party to keep a log, record or other documentation, and names nobody who may check one.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Oregon's crime of unlawfully disseminating an intimate image, previously limited to a photograph, film or other visual reproduction, now also reaches a digitally created, manipulated or altered depiction that is reasonably realistic, so a deepfake or AI-generated nude or sexual image of a real, identifiable person falls within the same crime as an authentic one.

The person must have caused the disclosure with intent to harass, humiliate or injure someone who did not consent, and a reasonable person must be harassed, humiliated or injured by it. A first offense is a Class A misdemeanor; a second or later offense is a Class C felony.

Law enforcement activity, legitimate medical, scientific or educational activity, legal proceedings, reporting to law enforcement, and images the depicted person voluntarily displayed publicly or that were created commercially with consent are excluded.

When LexLint raises it

When your app profile says your app generates images with AI, generates video with AI or publishes adult content.

Back to the example  ·  Lint your app

Page updated .