Voice or likeness cloning in United States (federal): related rules
Creating digital replicas of real people's voice, face or appearance, such as voice actors, employees, performers or customers. It requires consent and transparency, and using it to deceive or impersonate is penalized in several countries.
Risk classification
Jurisdiction
Level
Date
Note
California
Sector rules
January 1, 2025
AB 2602: contract terms allowing digital replicas of a performer require a specific description and representation of the performer.
Illinois
Data protection
—
If a voiceprint or face geometry is used for identification, BIPA requires written consent and a public retention policy.
Pending confirmation in the official source (last checked: November 4, 2026)ilga.gov refused the connection on Nov 4, 2026, so the official text is still unchecked. Written notice, written release and the ban on profiting still have to be confirmed in 740 ILCS 14/15(b)-(c); content based on general knowledge of the law.
Pending confirmation in the official source (last checked: November 4, 2026)ilga.gov refused the connection on Nov 4, 2026, so the official text is still unchecked. The public policy, the three-year limit and the standard of care still have to be confirmed in 740 ILCS 14/15(a) and (e); content based on general knowledge of the law.
Consent to capture biometric identifiers
Texas TRAIGATex. Bus. & Com. Code § 503.001(b-1), (e), (f) (modificado por HB 149, sec. 2)In force
Applies from January 1, 2026
When it relates
Applies if you capture face, voice, fingerprint or other biometric identifiers of people in Texas for commercial purposes.
What the rule provides
Obtain informed consent before capture.
Do not assume consent because an image is online, unless the person published it.
If models are trained on biometric data, do not use them to identify people without consent.
Verified in the official source on November 4, 2026Checked in the enrolled text of HB 149 (capitol.texas.gov), effective Jan 1, 2026 (Section 10): Section 2, amending § 503.001: (b-1) no consent exists merely because an image is online, unless the person published it; (e)(2) training is excluded unless the system is used to uniquely identify a specific individual; (f) if later used for a commercial purpose, the retention and destruction rules apply.