61 Global Data Authorities Issue Joint Statement on AI-Generated Imagery Privacy

NPC Joins International Data Protection Authorities in Statement on Privacy Risks of AI-Generated Imagery

February 24, 2026 1:15 PM Last Edit: February 24th, 2026

The National Privacy Commission (NPC), together with data protection authorities from across the globe, has published today a Joint Statement on AI-Generated Imagery and the Protection of Privacy (the “Statement”).

The Statement reflects the collective position of 61 data protection authorities, issued in response to serious concerns over artificial intelligence (AI) systems capable of generating highly realistic images and videos depicting identifiable individuals without their knowledge and/or consent. The signatories underscores the heightened risks such technology pose, particularly to children.

The Statement outlines key expectations and fundamental principles for all organisations developing and using AI content generation systems including:

• Implementing robust safeguards to prevent the misuse of personal information and generation of non-consensual intimate imagery and other harmful materials, particularly where children are depicted.
• Ensuring meaningful transparency about AI system capabilities, safeguards, acceptable uses, and the consequences of misuse.
• Providing effective and accessible mechanisms for individuals to request the removal of harmful content involving personal information and to ensure rapid response to such requests.
• Addressing specific risks to children through implementing enhanced safeguards and providing clear, age-appropriate information to children, parents, guardians, and educators. Through this initiative, signatories commit to continued information- sharing on enforcement, policy development, and public education efforts to address these emerging risks associated with AI-generated content.

The Statement was coordinated through the Global Privacy Assembly's (GPA) International Enforcement Cooperation Working Group (IEWG).

In the Philippines, the NPC remains committed to safeguarding personal data and continues to work closely with relevant agencies to ensure compliance with the Data Privacy Act of 2012. The NPC maintains regular coordination with the Department of Information and Communications Technology (DICT) and other relevant agencies as part of ongoing inter-agency efforts. The NPC is likewise reviewing regulatory and policy options, including continued monitoring developments, documentation, potential platform engagement, and broader inter-agency coordination.