What many people don't realize: the law applies even when the images were originally created with the subject's full knowledge and participation. Consent to take or possess an image is not the same as consent to distribute it.
The harm from this crime is immediate and lasting — shattered reputations, professional fallout, and severe emotional distress. This article covers the legal definition and penalties under Maryland law, a real case that shows how courts interpret the intent requirement, what victims can do, why digital evidence is central to these cases, and what defenses exist for those accused.
TL;DR
- Maryland's revenge porn law (Sec. 3-809) requires prosecutors to prove intent to harm, harass, intimidate, threaten, or coerce.
- Conviction is a misdemeanor carrying up to 2 years in jail and a $5,000 fine.
- The law now covers AI-generated deepfakes following a 2025 amendment.
- Victims can pursue criminal charges and civil lawsuits, and may recover attorney's fees under the statute.
- Digital forensic evidence (metadata, IP logs, device data) is decisive for both prosecution and defense.
What Maryland Law Says About Revenge Porn
Maryland Criminal Law Code Section 3-809 prohibits knowingly distributing a visual representation of another identifiable person that displays intimate parts or depicts sexual activity. "Distribute" is defined broadly — it includes uploading, publishing, sharing, broadcasting, selling, or simply allowing access.
The Three Elements Prosecutors Must Prove
To secure a conviction, the state must establish all three of the following:
- Intent to harm — the distribution was made with the intent to harm, harass, intimidate, threaten, or coerce the victim
- Lack of consent — the defendant knew the victim did not consent to distribution, or acted with reckless disregard for consent
- Reasonable expectation of privacy — the victim had a reasonable expectation that the image would remain private
All three elements must be proven beyond a reasonable doubt. A gap in any single element — particularly intent — is where most defense challenges are mounted.
The Consent Distinction That Trips People Up
Maryland law draws a sharp line between consent to create and consent to distribute. Someone who agreed to be photographed — or who sent images to a partner — has not consented to those images being shared with others. Charges can follow even when the images were originally taken or exchanged willingly — the act of sharing without permission is what triggers liability.
The Intent Bar
Maryland sets a higher standard than many states by requiring proof of malicious intent, not simply proof that distribution occurred without consent. This "intent to harm" element has significant implications:
- For prosecutors: They must demonstrate the defendant's purpose, not just the fact of distribution
- For defendants: Intent is typically the most viable element to challenge
Deepfakes Are Now Covered
Through SB 360 (effective July 1, 2025), Maryland expanded the statute to cover AI-generated synthetic images — commonly called deepfakes. A deepfake is a computer-generated image or video that realistically depicts an identifiable person who was never actually filmed or photographed.
Under current law, distributing a realistic AI-generated intimate image without consent and with intent to harm is treated identically to distributing a real photograph.
Leister v. Leister: How Intent Actually Plays Out in Court
Cody N. Leister v. Jordan L. Leister (Court of Special Appeals of Maryland, No. 1061, Sept. Term 2020) is a clear example of how the intent element operates in practice — and how quickly outcomes can turn on a single missing finding.
The facts: a husband had taken explicit photos and videos of and with his wife, with her consent. She had permitted him to post images to his Reddit account on the condition that her face not be shown. He had also posted photos to Tumblr as early as 2016. No image showed her face.
The trial court issued a protective order after finding the Tumblr posts violated Sec. 3-809 — but notably also found that the husband lacked intent to harm or harass. The Court of Special Appeals reversed the protective order on that basis: the statute requires intent to harm, harass, intimidate, threaten, or coerce, and the trial court had expressly found that element missing.
The appellate court also noted the trial court had failed to make findings on the reasonable expectation of privacy question.
What this case shows:
- Courts apply the intent requirement strictly — facts that look like revenge porn on the surface may not satisfy the statute
- Prior consent arrangements (like permission to post with conditions) complicate the privacy analysis
- Revenge porn cases are rarely as clear-cut as they first appear
Note: Leister is an unreported opinion and practitioners may not cite it as precedent under Maryland Rule 1-104, but it illustrates precisely how courts weigh intent against surface-level facts.
Criminal Penalties and Civil Remedies
Criminal Consequences
A violation of Sec. 3-809 is a misdemeanor punishable by:
- Up to 2 years in prison
- A fine of up to $5,000
- Or both
If the victim is a minor, the conduct may implicate separate statutes — specifically Md. Criminal Law Sec. 11-207, a felony provision with significantly higher penalties.
Beyond jail and fines, a conviction produces a permanent criminal record that affects:
- Employment prospects and background checks
- Professional licenses and certifications
- Housing applications
- Educational opportunities
Civil Liability
Under the current version of Sec. 3-809, the same distribution that triggers criminal charges also supports a civil lawsuit. Victims can sue for:
- Defamation per se — a claim built directly into the statute, requiring no separate proof of reputational harm
- Invasion of privacy under Maryland common law
- Intentional infliction of emotional distress, pursued as a separate common-law claim
The 2025 SB 360 amendment added attorney's fee recovery for prevailing plaintiffs, making civil claims more accessible for victims who previously couldn't absorb litigation costs.
A single post — one image shared to one platform — can simultaneously generate a criminal prosecution and a civil lawsuit. That means a defendant may face up to 2 years in prison, a $5,000 fine, and a civil judgment that includes the plaintiff's attorney's fees on top of their own legal costs.
The Role of Digital Evidence in Revenge Porn Cases
Digital forensics sits at the center of virtually every revenge porn case. The evidence that matters most is rarely visible to the naked eye.
What Digital Evidence Can Establish
| Evidence Type | What It Can Show |
|---|---|
| EXIF/image metadata | Camera make and model, date/time of creation, GPS coordinates, device ID |
| Social media platform logs | Account activity, upload timestamps, IP addresses used |
| Email headers | Sender identity, routing path, send time |
| Cloud storage records | Sync history, access logs, file versions |
| Communication records | Text messages and DMs showing intent or consent discussions |
EXIF data, in particular, can contain device and location information embedded in image files — details the person sharing the image may not even know are there.
Why Preservation Timing Matters
Digital evidence can be deleted or overwritten quickly. Under federal law, internet service providers and social media platforms will preserve account records for 90 days (renewable for an additional 90 days) after a government preservation request. Outside that window, data may be gone.
Victims and their attorneys need to act fast: screenshot content with visible URLs and timestamps, document all locations where the material appears, and consult a forensic professional before confronting the perpetrator or requesting platform removal.
Forensic Evidence Works Both Ways
For those accused, forensic analysis can be just as valuable as it is for prosecutors. IP logs and account access records can establish that someone else used the account, metadata can challenge the prosecution's claimed timeline, and device examination can rule out the accused as the source of a distribution.
Prudential Associates, based in Rockville, MD, handles exactly this kind of work. Their certified examiners produce court-admissible forensic reports — and have testified as expert witnesses in state and federal proceedings — covering device analysis, metadata extraction, IP tracing, and encrypted communication recovery. They serve clients across Maryland, Washington DC, and nationally.
Steps Victims Should Take in Maryland
Step 1 — Document Everything First
Before doing anything else:
- Take dated screenshots of all content and any messages from the perpetrator
- Record every URL where the material appears
- Do not log out of platforms that may contain evidence
- Do not confront the perpetrator before documentation is complete — this can destroy evidence and complicate your case
Step 2 — Report and Request Removal
- File a police report under Sec. 3-809 with your local law enforcement agency. If police decline to file charges, you can file an Application for Statement of Charges with a District Court commissioner.
- Request platform removal: Meta, X, Reddit, and Google all have non-consensual intimate image removal policies.
- Contact the Cyber Civil Rights Initiative: CCRI operates an Image Abuse Helpline at 844-878-CCRI (2274) and provides takedown support through their Safety Center.
Step 3 — Understand Your Civil Options
Victims have several civil remedies available beyond criminal charges:
- Intentional infliction of emotional distress — a tort claim for severe psychological harm caused by the perpetrator's conduct
- Invasion of privacy — covers unauthorized disclosure of intimate images
- Defamation — applicable when the content is shared with false or damaging context
- Protective or restraining order — can prohibit further contact or distribution
Consulting an attorney early is essential. Documented digital forensic evidence — preserved metadata, platform records, and device data — can significantly strengthen civil claims.
Common Defenses Against Revenge Porn Charges in Maryland
Lack of Intent to Harm
Because Sec. 3-809 requires proof of intent to harm, harass, intimidate, threaten, or coerce, a defendant who can demonstrate the sharing occurred without malicious purpose has a viable path. Inadvertent forwarding, sharing without knowledge of the image's private nature, or other circumstances that negate malicious intent can defeat the prosecution's case on this element alone.
Consent and No Reasonable Expectation of Privacy
If the depicted person explicitly consented to distribution, or if the images were already publicly accessible, the defense can challenge whether key statutory elements are met. As Leister illustrates, prior consent arrangements significantly complicate these analyses. Proving consent typically depends on communication records — texts, emails, or DM history showing what was agreed to and when.
Mistaken Identity and Procedural Challenges
Digital forensics can establish that someone else was responsible for the distribution. Evidence pointing to mistaken identity includes:
- IP logs placing the distribution from a different geographic location
- Account access records showing a third party was logged in at the time
- Device metadata inconsistent with the accused's hardware or software
Procedural challenges add a second layer of defense. Courts may suppress evidence obtained through illegal search and seizure, and the prosecution must prove every element beyond a reasonable doubt. Any gap in the chain of digital evidence gives defense counsel room to work.
Frequently Asked Questions
Is revenge porn illegal in Maryland?
Yes. Maryland criminalized revenge porn in 2014 under Criminal Law Code Section 3-809. Violations can result in criminal prosecution, civil liability, or both — and the law has been amended multiple times since to expand its scope.
What is the punishment for revenge porn in Maryland?
Conviction is a misdemeanor carrying up to 2 years in prison and/or a fine up to $5,000. A permanent criminal record follows, affecting employment records, professional licenses, and housing applications.
Can I sue someone for revenge porn in Maryland?
Yes. Section 3-809 provides a civil cause of action for defamation per se and invasion of privacy. The 2025 SB 360 amendment allows a prevailing plaintiff to recover reasonable attorney's fees, reducing out-of-pocket barriers for victims pursuing civil claims.
Does Maryland's revenge porn law cover AI-generated deepfakes?
Yes. Maryland's 2025 amendment (SB 360, effective July 1, 2025) expanded the definition of "visual representation" to include computer-generated images indistinguishable from the depicted person. Deepfakes are treated the same as real photographs or videos under Sec. 3-809.
Can I be charged with revenge porn if the images were originally shared with consent?
Yes. Consent to create, possess, or receive intimate images does not equal consent to distribute them. The statute focuses on distribution without consent and with intent to harm — not on how the images were originally created or exchanged.
