What should I do if someone shares my private photographs without consent?

A person whose private photographs are shared online without consent in Pakistan may have criminal, civil and platform-based remedies depending on the nature of the material and how it was obtained or distributed. The Prevention of Electronic Crimes Act, 2016, as amended, contains provisions addressing specified violations of privacy, dignity and modesty. Section 21 can be particularly relevant where sexually explicit imagery, threats or other conduct satisfies its statutory elements; section 20 concerns defined false information harming dignity and privacy. Neither applies automatically to every photograph.

The immediate priorities are safety, preservation of reliable evidence and limiting further circulation. A victim should not be required to publish the material again to establish a complaint. The correct enforcement authority and content-removal mechanism must be identified under the 2025 amendments and current procedures.

Distinguish ordinary and intimate photographs

An ordinary portrait published without consent can involve different legal questions from sexually explicit or intimate content, fabricated images or threatening communications.

The statutory elements depend on publication, consent, intent, context and the nature of material. The legal analysis should identify the exact offence rather than assume all images fall under the same penal provision.

Private ownership of a photograph or an earlier voluntary sharing of it does not necessarily authorise unlimited redisclosure.

Preserve evidence safely

Record the URL, account name, date, messages and platform information. Where possible, preserve a non-public record of the original post and the surrounding communication.

Do not forward intimate images widely or ask friends to circulate copies merely to build a complaint file. The evidence may be preserved privately for lawful investigation.

If a minor is involved, avoid downloading or distributing explicit material and seek qualified assistance through lawful reporting channels.

Section 21 PECA

Section 21 of PECA addresses specified conduct involving sexually explicit images, superimposition, intimidation and other acts within its wording.

A complaint must connect the actual conduct to the statutory ingredients. An image's private character alone may not satisfy every element.

The victim should describe the original photograph, its alteration or publication where relevant, and any threats or blackmail, without unnecessary detail.

Section 20 and dignity

Section 20 has governed particular intentional public transmission of false information harmful to a natural person's dignity or privacy, subject to amendments and applicable conditions.

An allegation that the posted photograph was accompanied by knowingly false statements may need separate analysis from nonconsensual publication alone.

Counsel should consult the operative text after the 2025 amendments and not quote an older version as if unchanged.

Threats and blackmail

A person may threaten to publish images to obtain money, a relationship or another concession. Such conduct requires urgent assessment under the relevant cybercrime and potentially other penal provisions.

Preserve messages showing demands and threats. Do not negotiate by supplying more private material or compromising account credentials.

Where immediate danger exists, seek lawful protective assistance and follow emergency reporting channels.

Digital impersonation

A perpetrator may create a false profile or altered image to suggest that the victim participated in conduct that never occurred.

Preserve both the fake profile and evidence of the genuine account. Platform impersonation procedures may assist in removal.

The legal complaint should distinguish the actual person who controls the account from assumptions based on a displayed username.

Reporting to the competent investigation authority

Cybercrime investigation arrangements should be identified under the current PECA amendments and notifications. The complainant should use authorised reporting channels.

The complaint should include a factual timeline, relevant links and evidence of ownership or identity as appropriate.

Do not submit inaccurate allegations or expose unrelated private information in the process.

Platform takedown

Social networks commonly provide channels to report intimate-image abuse, impersonation, harassment or privacy violations.

Use the platform's reporting mechanism promptly and retain the case reference. A platform's decision may be separate from criminal investigation.

Removal from one platform does not automatically eliminate copies elsewhere; document relevant instances without spreading them further.

Civil remedies

An affected person may consider injunctive or other civil relief under applicable law where a legally protected right and proper forum exist.

The relief should identify the publisher and conduct to be restrained. The court may consider urgency and available evidence.

Damages require an appropriate legal foundation and proof, not an automatic formula based on how many people viewed a post.

Preservation and privacy of the victim

The legal process should avoid unnecessary disclosure of the images to unrelated people. Counsel should secure evidence appropriately and seek available protective handling.

Employers, schools or family members should not amplify the harmful content under the pretext of investigating it.

The victim's safety and dignity should remain central to the remedy sought.

Device and account security

Change passwords, enable multifactor authentication, review active sessions and secure compromised email or cloud accounts.

If photographs were stolen from a device, the legal assessment may include unauthorised access or copying provisions under PECA.

Preserve relevant access records and avoid factory resetting the only evidentiary device without advice.

A practical example

An acquaintance who received photographs privately later threatens to upload them unless the sender pays money.

The victim should preserve the threats, avoid making further disclosures and seek immediate assistance through authorised cybercrime and platform channels.

A subsequent upload may create additional legally relevant facts. Each allegation should be assessed under the exact statute.

False or mistaken attribution

Sometimes an image is shared by an account falsely attributed to a particular person. Investigators must establish authorship and control.

The victim should identify what is known and what remains suspected rather than name an individual without reliable grounds.

Account data and other technical evidence may be necessary to determine responsibility.

Opinion and recommended steps

Unauthorised sharing of private photographs may engage PECA, privacy and civil remedies, but the precise legal route depends on the content and conduct. Sensitive imagery and threats call for particular urgency.

Preserve URLs and communications securely, protect accounts, use platform takedown procedures and file a fact-specific complaint with the competent authority. Avoid redistributing harmful material during evidence collection.

Principal authorities: Prevention of Electronic Crimes Act, 2016, particularly sections 20 and 21 where applicable, as amended in 2025; Qanun-e-Shahadat Order, 1984; current investigation and online-content regulations; applicable civil injunction principles.