CnaM calls for stronger laws on AI images

The head of online-safety regulator Coimisiún na Meán (CnaM) has told an Oireachtas committee that stronger laws to tackle the misuse of AI tools should be considered. 

Executive chair Jeremy Godfrey told the Joint Committee on Artificial Intelligence that the regulator shared public concern about the misuse of generative AI, particularly when it was used for non-consensual sharing of intimate images, or the creation of child sexual-abuse material. 

He told the committee that such content was illegal under Irish law, adding that platforms must remove it when reported, and very large online platforms must mitigate the risk of it appearing on their services in the first place.

CnaM is currently assisting a European Commission investigation into X’s compliance with its obligations in these areas. 

‘New types of harm’ 

Godfrey told the committee that it was “worth considering” whether to supplement current requirements for AI deployers under the Digital Services Act (DSA) and AI Act. 

“For instance, it could be useful to make it a prohibited practice to deploy AI systems that are capable of producing intimate imagery of real people without their consent, or which are capable of producing child sex-abuse material. 

“It may also be useful to widen the scope of ‘high-risk systems’ under the AI Act to include a wider range of chatbots and generative AI tools,” he stated. 

Godfrey said that, while there had been changes aimed at making the online world safer, these had not yet been sufficient, adding that new types of harm – especially related to AI – had emerged. 

DPC needs ‘sustained support’ 

Also speaking at the committee, Data Protection Commission (DPC) chair Des Hogan said that it was “essential” that the data watchdog remained appropriately resourced and fully equipped to meet its regulatory objectives in relation to AI. 

“Regulators such as the DPC require sustained support from Government as new responsibilities increase workloads,” he stated. 

Hogan told the committee that, between 2021 and 2025, the DPC engaged with companies in relation to around 180 AI products and services.

In 2024 and 2025, he said, 59% of AI engagements resulted in formal recommendations to improve compliance with data law.