How to protect your likeness as an actor in the age of AI
ImageVault · Updated
In short
Protecting your likeness starts before the scan — with a contract that describes each use of your digital replica specifically — and continues afterwards by controlling who holds the scan data and watching public platforms for misuse. Most of the risk sits in the files a production keeps after wrap, so the single most useful step is knowing where your scans are and who may use them.
Why an actor's likeness needs protecting now
Most film, television and game productions now capture their principal cast — photogrammetry stills, a 3D mesh of the face and body, texture maps, sometimes facial performance and voice. That data exists for good reasons: visual effects, digital doubles, reshoots and stunts. It is also exactly what is needed to build a convincing digital replica of the performer.
Separately, generative AI tools can now produce realistic video of a recognisable actor from public photos and footage alone. The result is two distinct risks: authorised data being reused beyond what the performer agreed to, and unauthorised synthetic content made by strangers.
Before the scan: what to agree
The strongest protection is a clear contract. Union agreements such as the SAG-AFTRA film and television contract (Article 39) and laws such as California AB 2602 expect consent to a digital replica to come with a reasonably specific description of how it will be used. A general clause granting rights to use your likeness 'in any media now known or hereafter devised' is the thing to push back on.
- What will be captured (face, body, voice, performance) and why.
- Each intended use of the resulting replica, described specifically — not 'for the production and its promotion'.
- Whether the data may be used to train AI models (it should be a separate, explicit opt-in).
- Who will hold the files, for how long, and how deletion will be confirmed.
- Separate consent and payment for later uses, sequels, dubbing into other languages and alterations.
- Whether you will be notified of, and can approve, any transfer to a vendor or third party.
After the scan: control the data
Once a production wraps, scan files typically stay on the servers of the production and its VFX vendors with no record of who accesses them and no proof of deletion. Holding the files does not give a production the right to use them however it likes, but in practice the performer rarely knows where the files are.
Ask the production, in writing, which companies hold your scan data and when it will be deleted. In the UK and EU, a scan detailed enough to identify you is biometric personal data under the GDPR, which gives you rights of access and, in many cases, erasure. An independent custodian such as ImageVault keeps one canonical archive of your scans, releases them to a production only after you or your representative approve a specific licence and the recipient confirms with two-factor authentication, and records every access in a tamper-evident ledger.
Watch for misuse
Searching your own name finds only part of what is out there. Synthetic content is often tagged with a character name, a film title or a fandom's shorthand, and it arrives in waves around casting news and trailer drops. Monitoring that works searches by name, role and production; follows the accounts that post it from one platform to the next; and checks each post both for your likeness and for evidence that it is AI-generated.
ImageVault's Deep Scan does this across TikTok, YouTube Shorts, Instagram Reels, X, Reddit, Pinterest, image search, stock libraries and AI-generation sites, and anchors face matching on the performer's own scan images rather than public photos. A free trial runs on the week's trending actors at imagevault.ai/try.
When you find a deepfake
Capture the evidence before anything else — URL, account, date and a recording of the post — because posts are deleted and reuploaded. Then decide on the response: a platform report for impersonation or synthetic media, a takedown or cease-and-desist letter for commercial or harmful use, or, for fan work, sometimes a licensing conversation rather than a legal one. Our guide to finding and removing deepfakes covers each route.
A checklist for representatives
Agents, managers and lawyers are usually the people who see the contract first. The most useful habits are simple ones.
- Flag every scan, digital-replica or AI clause in a deal memo for specific review.
- Keep a register of which productions have scanned each client and where the data went.
- Make AI training a separate yes/no, never bundled into a general grant.
- Diarise licence expiry dates and ask for written confirmation of deletion.
- Set up monitoring for clients with a public profile, timed around their release dates.