TLDR: Hong Kong’s privacy watchdog has launched a criminal investigation into a University of Hong Kong (HKU) law student accused of creating AI-generated pornographic images of over 20 women without their consent. The probe follows public outcry over the university’s initial lenient response and highlights a potential loophole in current laws regarding the generation versus distribution of such images.
Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) has announced a criminal investigation into a University of Hong Kong (HKU) law student embroiled in a scandal involving AI-generated non-consensual intimate images. The probe comes after allegations surfaced that the student, identified as ‘X’, created pornographic ‘deepfake’ images of approximately 20 to 30 women, including his classmates and teachers, without their knowledge or consent.
The student allegedly utilized photos sourced from the women’s social media accounts and free online artificial intelligence (AI) tools to generate these explicit images. The discovery was made in mid-February when a friend reportedly found the images on the student’s personal laptop.
The incident sparked significant public outrage, particularly concerning HKU’s initial handling of the matter. The university had reportedly issued only a warning letter to the student and demanded an apology, a response widely criticized as too lenient by victims and the public. Three of the alleged victims publicly accused the university of not doing enough to hold the student accountable.
In response to the growing controversy, the PCPD confirmed on July 15, 2025, that it “has launched a criminal investigation into the incident and has no further comment at this stage.” The watchdog also reiterated that disclosing a person’s personal data without their consent, with the intent to cause harm or with reckless disregard for potential harm, constitutes a criminal offense under Hong Kong’s privacy laws.
However, a critical legal challenge highlighted by the accusers is that current Hong Kong law primarily criminalizes the distribution of intimate images, including those created with AI, but not necessarily their generation. This perceived loophole has led victims to express concerns about their ability to seek full justice through the existing criminal justice system, as there have been no allegations so far that the student disseminated the deepfake images.
Also Read:
- Connecticut Legislates on AI: Deepfake Criminalization and Education Funding Enacted Amidst Broader Privacy Reforms
- Consumer Privacy Litigation Shifts Focus to Generative AI Tools
Experts have warned that this case may represent just the “tip of a very large iceberg” concerning non-consensual imagery facilitated by AI. Annie Chan, a former associate professor at Lingnan University, emphasized the pervasive threat, stating, “The HKU case shows clearly that anyone could be a perpetrator, no space is 100 percent safe.” The incident underscores the urgent need for legal frameworks to adapt to the rapid advancements in AI technology and address the ethical and privacy implications of AI-generated content.
