How to protect your voice from AI cloning: the laws, the takedown routes and the platform policies

If someone clones your voice, the first thing to know is what does not protect you. Copyright covers a specific recording and a specific composition. It does not cover the sound of your voice in general, as the Musicians' Union's Hayleigh Bosher piece puts it for UK law. A new track that sounds like you but copies none of your recordings may not infringe your copyright at all.

What protects the voice itself is a patchwork: a few state laws in the US, court orders in places such as India, contract rules, and the policies of the platforms where the fake ends up. This guide sets out each one as we read it on 24 Oct 2026. It is a practical guide, not legal advice.

What a clone attack looks like

The case of Murphy Campbell, a folk singer-songwriter from North Carolina, shows how it usually happens. Fans messaged her about new releases. She found AI versions of two songs she had recorded, "The Four Marys" and "Cuba", on her Spotify profile, although she had never uploaded those songs to Spotify. She believes they were made from her YouTube videos (Rolling Stone, The Verge).

Getting them removed took persistence. "I became a pest," she told The Verge. When The Verge reported on 4 Apr 2026, the tracks were gone from YouTube Music and Apple Music, but at least one was still on Spotify under a different artist profile with the same name. We covered the case and the UK debate in our news story.

Three things go wrong in a case like this: a fake under your name, a fake on your profile, and a fake that claims ownership of your real work. Each one has a different route out.

The laws that cover a voice

United States: state laws first

There is no federal voice right yet. The NO FAKES Act (S.4591) was introduced on 20 May 2026 and reported out of the Senate Judiciary Committee in June. On 30 Sep 2026 Sen. Marsha Blackburn asked for unanimous consent to pass it and Sen. Ted Cruz objected, citing free-speech concerns (Raw Story). Background is in our story on the delay. The reported text would preempt state digital-replica claims but save state laws "in existence, as of January 2, 2025" (GovInfo).

The state laws that matter most to musicians:

• Tennessee. The ELVIS Act, signed on 21 Mar 2024, adds voice to the rights the state protects. It reaches people who never signed anything with you. The Johnny Cash estate is using it against Coca-Cola over a sound-alike ad (our coverage).
• Illinois. The amended Right of Publicity Act says a person may not knowingly distribute or make available a sound recording "with actual knowledge" that it contains an unauthorised digital replica, and anyone who knowingly facilitates that can also be liable (enrolled text). Services that only store or transmit data are exempt if they lack actual knowledge, or act quickly to remove the material once notified.
• California. Labor Code 927 makes a contract clause unenforceable for new performances fixed from 1 Jan 2025 if it lets a company use a digital replica of your voice in place of work you would have done in person, lacks a reasonably specific description of the uses, and you had no lawyer or union negotiating it. Civil Code 3344.1 covers digital replicas of deceased performers in sound recordings, with damages of at least $10,000.
• New York. General Obligations Law 5-302 applies the same three-part contract test.

The detail of all four, and how they differ, is in our state-by-state guide.

United Kingdom: passing off, and a promised consultation

The UK has no personality right. Bosher notes that passing off helped Rihanna against Topshop because the T-shirt looked like official merchandise, but that only works where the public is misled about endorsement (MU). On 18 Mar 2026 the Technology Secretary, Liz Kendall, said unauthorised replication of likeness "can be harmful" and promised a consultation on digital replicas (HCWS1416).

India and elsewhere

The same MU piece notes that the Bombay High Court protected Arijit Singh's voice and likeness against Codible Ventures, and that France, Germany and others have some form of personality rights. If you are in India, a personality-rights suit in the High Court is a real option, though it costs money and needs a lawyer.

Platform routes: what you can do today

Laws take months. Platform processes are where most fakes actually come down.

Spotify. Its impersonation policy, announced on 25 Sep 2025, says: "Vocal impersonation is only allowed in music on Spotify when the impersonated artist has authorized the usage." Spotify also names the profile problem: uploaders who "fraudulently deliver music (AI-generated or otherwise) to another artist's profile". It says it is shortening review times for content mismatch and that artists can report mismatch even before release. Use the mismatch report for a fake on your profile, and the impersonation report for a fake under someone else's name that copies your voice.

YouTube. Its privacy guidelines say that if someone uses AI to make content that "looks or sounds like you", you can ask for it to be removed through the privacy complaint process. YouTube weighs whether the content is realistic and AI-generated, whether viewers are told, whether you can be uniquely identified, and whether it is parody or satire. This is separate from a copyright claim, so it works even when the fake copies none of your recordings.

False ownership claims. Campbell was hit from the other side too: an uploader used content-recognition systems to claim money from her own YouTube videos of public-domain songs. The distributor involved released the claims and banned the uploader (The Verge). Disputing a claim is covered in our Content ID guide.

Your distributor. Distributors earn their fee whoever uploads (Rolling Stone), so ask yours to raise a mismatch with every store, not only one. If a fake appears in Illinois or Tennessee, a written notice to the service that distributes it is worth sending; on our reading of the Illinois text, it is actual knowledge that triggers liability.

A checklist before anyone clones you

1. Register your real recordings with your distributor and, where available, a content-recognition system. Registering makes it harder for a stranger to claim your work first, as happened to Campbell.
2. Claim your artist profiles on every major store, so you can see uploads and report mismatch fast.
3. Keep dated originals: session files, stems and the earliest uploads. They are your proof of what is really you.
4. Read every contract for "digital replica", "voice model" or "synthetic" clauses. Ask for a specific description of uses, a time limit and payment. California and New York reward artists who had counsel negotiate these terms, so use a lawyer or your union.
5. Set up a search alert for your name on streaming stores and YouTube, and ask fans to tell you about releases you did not announce.
6. When you find a fake, screenshot it with the date, report it through the platform's own route (above), tell your distributor, and keep a log of every ticket.

What we think

The honest picture is that most artists are protected by platform policy, not by law. Only Tennessee and Illinois clearly reach a stranger who clones a living artist's voice, and the federal bill that would cover everyone is stuck. California and New York help mainly artists who have lawyers or unions, which is not most independent musicians.

That puts the burden on the platforms, and the Campbell case shows the gap: a profile-level fix does not catch a second profile with the same name. Spotify's policy is the right rule. What artists need now is enforcement that moves at the speed of upload, plus distributors who check identity before a release lands on someone else's page. Until then, the practical defence is boring and it works: register your real work, watch your profiles, and become, in Campbell's word, a pest.