EdCircuit Staff 
An AI deepfake response plan should be established before a fabricated image, video, or recording reaches a school community. Once synthetic content begins circulating, administrators will not have days to decide who should investigate, how evidence should be handled, or when families and law enforcement should become involved. Those decisions may need to be made within minutes.
A student may arrive in the office after discovering that classmates are sharing an AI-generated explicit image bearing her face. A teacher may learn that a fabricated audio recording is spreading through social media. A superintendent may be told that a false video announcing a school emergency has appeared on an anonymous account.
In each situation, the school must respond quickly without amplifying the content, damaging evidence, compromising an investigation, or causing additional harm to the person depicted.
That requires more than an acceptable-use policy written before generative AI became widely available. Districts need a coordinated plan involving administrators, technology leaders, counselors, communications professionals, Title IX coordinators, legal counsel, school safety personnel, and families.
Policies Must Specifically Address Deepfakes
Many districts already prohibit bullying, harassment, impersonation, threats, and inappropriate technology use. Those provisions may apply to deepfakes, but relying entirely on older language can create uncertainty.
Students and employees should not have to interpret whether “technology misuse” includes cloning someone’s voice, fabricating a video, or placing a classmate’s face into an explicit image.
District policies should specifically address synthetic media, digital replicas, AI-generated impersonation, and manipulated images, videos, and audio. They should prohibit creating, requesting, distributing, or threatening to distribute content that falsely depicts an identifiable person when the purpose or effect is to deceive, exploit, intimidate, harass, humiliate, or cause harm.
Policies should also address the use of AI to create sexually explicit content, impersonate school employees, obtain confidential information, fabricate evidence, or spread false safety announcements.
At the same time, districts should distinguish harmful impersonation from legitimate educational uses such as satire, art, historical simulations, and media literacy projects. Legal counsel should review the final language for alignment with state law, Title IX, student due process, school disciplinary authority, and First Amendment protections.
Deepfake Response Requires a Coordinated Team
A deepfake incident can affect nearly every part of district operations. Leaving the response entirely to the technology department or building principal can create delays and missed responsibilities.
Technology staff may need to preserve account information, inspect school-issued devices, secure compromised accounts, and contact platform providers. Administrators may investigate student conduct. Counselors may support the person targeted. A Title IX coordinator may need to evaluate whether digital sexual harassment procedures apply.
Communications staff may have to correct misinformation, while law enforcement may become involved when content includes threats, exploitation, stalking, extortion, or possible criminal conduct.
Before an incident occurs, districts should identify who will lead the response and who will serve as the backup. The plan should specify who contacts families, preserves evidence, coordinates with law enforcement, evaluates Title IX implications, and communicates with the school community.
During the first hour, the district’s priorities should be to protect the person targeted, limit additional exposure, preserve essential evidence, notify the appropriate leaders, and determine which legal, safety, or cybersecurity procedures must be activated.
Speed matters, but speed should not become panic. Schools should avoid making public accusations, promising that every copy will be removed, or announcing conclusions before the facts have been evaluated.
Center the Needs of the Victim
The first adult response can determine whether a targeted student continues seeking help or withdraws in fear and embarrassment.
A student reporting a humiliating or explicit deepfake should be taken to a private setting and connected with a trusted administrator, counselor, or trained employee. The adult should remain calm, listen without judgment, and reassure the student that reporting the incident was the right decision.
The first questions should focus on safety. Is the student being threatened or blackmailed? Has the image been distributed to classmates, family members, teammates, or others? Is the student afraid to attend school? Is there an immediate mental health concern?
Adults should avoid blaming questions about why the student posted a particular photograph or used a certain app. A yearbook portrait, athletic photograph, or ordinary social media image can be manipulated without the student doing anything wrong.
The National Center for Missing & Exploited Children recommends focusing on the harm the child is experiencing rather than beginning with an investigation into how the image was created.
Support may need to continue through counseling, schedule adjustments, assignment extensions, contact restrictions, or assistance managing rumors. If the incident could constitute digital sexual harassment, the Title IX coordinator should be involved promptly.
The U.S. Department of Education’s Office for Civil Rights identifies the nonconsensual sharing of intimate images—whether real, altered, or created with AI—as conduct that may constitute online or digital sexual harassment, depending on the circumstances.
Preserve Evidence Without Spreading the Content
Digital evidence can disappear quickly. Posts are deleted, temporary stories expire, usernames change, and students remove messages once they realize administrators are investigating.
Schools should document available URLs, usernames, account names, dates, timestamps, captions, threats, and the names of people who may have received the content. However, employees should consult legal counsel and law enforcement before downloading or copying explicit material involving minors.
Students should not be asked to forward an explicit image to a school email account or send it to another device for an administrator to examine. Every unnecessary transfer can further distribute the content and create additional legal and privacy concerns.
The NCMEC Take It Down service specifically warns people not to download or have someone send them a nude, partially nude, or sexually explicit image of a minor solely to submit it to the service. If the content is not already on the original device, families and schools should seek help through the NCMEC CyberTipline or law enforcement.
District procedures should explain how employees can document an incident without placing harmful files into ordinary email, cloud-storage, student information, or discipline systems. Access to preserved evidence should be limited to people with an official role in the investigation.
Know When an Incident Must Be Escalated
A harmless classroom parody and an AI-generated sexual image of a student are fundamentally different situations. Districts should establish escalation criteria based on the nature of the content, the ages of the people depicted, evidence of threats or extortion, the extent of distribution, and the possibility of criminal conduct.
Immediate escalation may be necessary when an incident involves explicit depictions of a minor, sextortion, demands for money, threats of violence, stalking, compromised accounts, stolen credentials, or impersonation used to obtain records or confidential information.
Employees should not be expected to make complex legal decisions independently. District leaders should establish reporting expectations with legal counsel, child-protection personnel, and local law enforcement before an incident.
The NCMEC CyberTipline accepts reports involving suspected online child sexual exploitation. When a child is in immediate danger, schools and families should contact emergency services or local law enforcement.
Involving law enforcement does not end the school’s responsibility. The district must continue supporting the student and addressing the educational and emotional impact while any external investigation proceeds.
Act Quickly to Remove Harmful Content
Removing a deepfake does not guarantee that every copy will disappear, but rapid reporting can reduce its reach.
The platform’s reporting process should be used to report impersonation, harassment, child exploitation, or nonconsensual intimate imagery. Families and districts should preserve confirmation numbers, emails, dates, and screenshots documenting the removal request.
Under the federal TAKE IT DOWN Act, covered platforms must provide a process for requesting the removal of nonconsensual intimate images, including AI-generated deepfakes. After receiving a valid request, platforms must remove qualifying material and known identical copies within 48 hours.
If a covered platform does not remove the content, does not offer a reporting process, or has a process that does not work, the victim or an authorized person can report the platform through the Federal Trade Commission’s TakeItDown.ftc.gov process.
This is different from NCMEC’s Take It Down service, which is intended for nude, partially nude, or sexually explicit images involving someone who was under 18 when the content was created. The service generates a digital fingerprint, or hash, on the person’s device. Participating platforms can use the hash to identify matching files without the image itself being uploaded to NCMEC.
Neither process guarantees that every copy will disappear. Schools should be honest about those limitations while helping families document reports and pursue available removal options.
Communicate Without Amplifying the Deepfake
A deepfake involving one student may require limited, confidential communication. A fabricated emergency message or false video involving a district leader may demand a broader response.
Public communication should be accurate, restrained, and focused on safety. The district should not repost harmful content to demonstrate that it is false, describe explicit material unnecessarily, identify a targeted student, or speculate publicly about who created it.
The district may need to confirm that fabricated content is circulating, explain that it is not an authentic school communication, and direct the community to verified district channels.
Communication with the targeted family should be direct and personal. Families should know what the school has confirmed, what steps have been taken, what support is available, who will serve as their primary contact, and when they can expect another update.
Prepare Employees, Students, and Families
Employee training should focus on action rather than unreliable visual clues. Staff members need to know whom to contact, what information to preserve, what not to download or forward, and when immediate escalation is necessary.
Students must understand that creating a deepfake of another person without permission is not harmless experimentation. Instruction should address consent, privacy, dignity, legal consequences, and the inability to control content after it is shared.
Schools should also teach “upstander” behavior. Students who receive harmful content can refuse to share it and report the situation to an adult. Forwarding, saving, or commenting on the image may deepen the victimization even if the recipient did not create it.
Families also need clear guidance about how deepfakes are created, where harmful content can be reported, and whom to contact within the district. Conversations at home should reassure children that they can ask for help without automatically facing blame or punishment.
Schools and families should review privacy settings and consider how student photographs are shared publicly. District websites, social media accounts, athletic pages, and promotional materials should use clear photo-consent practices and honor families that decline permission.
Preparedness Demonstrates Care
An effective AI deepfake response plan does more than describe prohibited conduct. It gives employees confidence, provides families with a clear point of contact, protects evidence, supports victims, coordinates investigations, and helps the district communicate without increasing the harm.
Most importantly, it tells students what will happen when they ask for help.
Their concern will be taken seriously. They will not be blamed for someone else’s decision to manipulate their identity. They will not be left alone to negotiate with an offender or chase harmful content across the internet.
Deepfakes may be powered by rapidly changing technology, but an effective school response rests on familiar foundations: preparation, communication, trusted relationships, sound policy, and a commitment to protecting every person’s dignity.
Part Two of a Two-Part Series
Subscribe to edCircuit to stay up to date on all of our shows, podcasts, news, and thought leadership articles.
