Minnesota's deepfake law bills service providers for every access while xAI litigates

"Per access" is the clause that reorganizes the engineering. Most content rules a team has shipped count violations at the moment of creation: one bad generation, one incident, one row in the abuse queue. Minnesota's meter runs on retrieval instead ^[3], which moves the exposure out of the generation logs and into the CDN logs. One image nobody shares is one count; the same image on a public link that a hundred people open is fifty million dollars at the statutory maximum ^[13].

Here is what teams tell themselves users do with an image tool: generate, look, download, close the tab. Here is what users actually do: paste the link into a group chat, where the count keeps climbing without anyone at the company touching a keyboard.

The filter problem is separate from the speech problem, and it arrives first. Minnesota's definition of nudity reaches the "primary genital area, groin, inner thigh, buttocks, or breast of a human being", which is broader than what broadcast television excludes ^[4]. A classifier tuned to broadcast norms will pass images this statute reaches, so compliance is a threshold change, and threshold changes are paid for in refusals to users who asked for nothing unusual.

xAI's separate South Carolina filing offers a different kind of evidence: moderation volume. The ratio inside it is about 302 reports to the National Center for Missing & Exploited Children for every arrest that followed ^[14]. Report volume measures throughput of a pipeline. The arrest figure is the only outcome number in the filing, and it is the small one.

Gizmodo's account of the case reports no Minnesota enforcement action against a provider, no fine levied, and no stated theory for how a single access gets counted ^[15]. A team pricing this risk today has the cap and nothing else to work with.

So the forcing function. For each surface that returns a generated image, count the maximum number of distinct accesses one bad output can accumulate before a human at your company sees it. Unauthenticated public link: effectively unbounded. Signed-in gallery only: bounded by seat count. Multiply that ceiling by the statutory maximum and set the product against what the surface earns from Minnesota in a year. For a consumer image tool with sharing on by default, link sharing loses that comparison by orders of magnitude, and the cheaper move is to require sign-in on Minnesota traffic and absorb the support tickets from people whose links stopped working. The expensive move is treating a litigation calendar as a compliance plan, because the statute is enforceable now ^[1][3].