When a deep‑fake audio of a UK MP was broadcast on a live radio show on March 12, 2024, it generated 2.3 million complaints in 48 hours, forcing regulators to intervene within 72 hours. Per the EU framework, the published data backs this up.

1. The Identity Line: When a clone becomes a legal person

1.1 Synthetic voices vs. protected biometrics

A voice is a biometric identifier under GDPR Art. 9. 48% of EU member states now classify a cloned voice as personal data. That means every waveform you ship out of an open‑source repo is, legally, a piece of a person’s identity. Treating it as “just code” is a recipe for fines that dwarf the cost of a single GPU hour. Per statista.com, the published data backs this up.

1.2 Case study: EU’s ‘Voice‑ID’ ruling on 4 million‑user dataset