A. A person is liable in a civil action for intentionally disclosing or threatening to disclose an intimate image of another individual if the depicted individual suffers harm from the disclosure or threatened disclosure and the person knew or should have known all of the following:
1. The depicted individual did not consent to the disclosure.
2. The intimate image was private.
3. The depicted individual was identifiable from the image itself or from information that is displayed in connection with the image.
B. Evidence that the depicted individual consented to the creation of the image or that the depicted individual previously consented to the disclosure of the image does not by itself establish that the depicted individual consented to the disclosure of the intimate image or that the depicted individual lacked a reasonable expectation of privacy.
C. A depicted individual who does not consent to the specific sexual activities or state of nudity depicted in an intimate image of the individual retains a reasonable expectation of privacy even if the image was created when the depicted individual was in a public place.
D. Notwithstanding subsection A of this section, a person is not liable under this section if the person proves that disclosing or threatening to disclose the intimate image was any of the following:
1. Made in good faith in any of the following:
(a) Law enforcement.
(b) A legal proceeding.
(c) Medical education or treatment.
2. Made in good faith in reporting or investigating any of the following:
(a) Unlawful conduct.
(b) Unsolicited and unwelcome conduct.
3. Related to a matter of public concern or public interest.
4. Reasonably intended to assist the depicted individual.
5. Made by a parent, legal guardian or individual with legal custody of a child and the depicted individual is the child unless the image is disclosed with the intent to harm the depicted individual.
E. Subsection D of this section does not apply if the plaintiff proves the disclosure was prohibited by law or made for the purpose of sexual arousal, sexual gratification, humiliation, degradation or monetary or commercial gain.
F. Disclosing or threatening to disclose an intimate image is not a matter of public concern or public interest solely because the depicted individual is a public figure.
G. If the plaintiff files with the court and serves on the defendant a confidential information form that includes the excluded or redacted plaintiff's name and other identifying characteristics, the court may exclude or redact from all pleadings and documents filed in the action other identifying characteristics of the plaintiff. The court may make further orders as necessary to protect the identity and privacy of a plaintiff.
H. The prevailing plaintiff may recover:
1. The greater of:
(a) Economic and noneconomic damages that are proximately caused by the defendant's disclosure or threatened disclosure, including damages for emotional distress whether or not accompanied by other damages.
(b) Statutory damages of not more than $10,000 against each defendant found liable under this section for all of the defendant's disclosures and threatened disclosures that the plaintiff knew or reasonably should have known when filing the action or that became known during the pendency of the action. In determining the amount of statutory damages under this subdivision, consideration must be given to the age of the parties at the time of the disclosure or threatened disclosure, the number of disclosures or threatened disclosures made by the defendant, the breadth of distribution of the image by the defendant and other exacerbating or mitigating factors.
2. An amount equal to any monetary gain made by the defendant from disclosing or threatening to disclose the intimate image.
3. Punitive damages.
4. Reasonable attorney fees and costs.
5. Additional relief, including injunctive relief.
I. A civil action for an unauthorized disclosure may not be brought later than four years after the date that the disclosure was discovered or should have been discovered with the exercise of reasonable diligence except that a threat to disclose may not be brought later than four years after the date of the threat to disclose.
J. In a civil action brought by a depicted individual who was a minor on the date of the disclosure or threat to disclose, the time specified in subsection I of this section does not begin to run until the depicted individual attains the age of majority.
K. For the purposes of this section:
1. "Consent" means affirmative, conscious and voluntary authorization by an individual with legal capacity to give authorization.
2. "Depicted individual" means an individual whose body is shown in whole or in part in an intimate image.
3. "Disclose" or "disclosure" means to display, distribute, publish, advertise or offer.
4. "Harm" includes physical harm, economic harm and emotional distress whether or not accompanied by physical or economic harm.
5. "Intimate image" means a photograph, film, videotape, digital recording or other similar medium that shows a state of nudity or specific sexual activities.
6. "Private" means either of the following:
(a) Created or obtained under circumstances in which a depicted individual had a reasonable expectation of privacy.
(b) Made accessible through theft, bribery, extortion, fraud, false pretenses, voyeurism or exceeding authorized access to an account, message, file, device, resource or property.
7. "Specific sexual activities" has the same meaning prescribed in section 11-811.
8. "State of nudity" has the same meaning prescribed in section 11-811, subsection E, paragraph 14, subdivision (a).