Here's how to protect your artwork from AI training in three practical steps: embed protective metadata in your files, use platform opt-out tools where they exist, and monitor for unauthorized use of your work.
You've likely seen the headlines about AI companies training on creator work without permission. We've covered the legal battles and how AI scraped your content in the first place. Now let's talk about what you can actually do today—not someday, not "when the law settles," but right now.
The truth: there's no perfect shield. But three tactics can meaningfully reduce your risk and create a paper trail if infringement happens. Let me walk you through each one.
How to add metadata that tells AI systems to stay away
Most AI scrapers examine the hidden information embedded within image files. The IPTC Photo Metadata Standard provides a mechanism for flagging content that shouldn't be used for algorithmic training or data mining purposes. Activating this marker won't stop every automated crawler, but it establishes documented evidence of your intent to restrict use—a detail that carries both legal weight and technical significance if someone later trains a system on your images without authorization.
Here's how to protect artwork from AI training using metadata:
-
Download a metadata editor like ExifTool (free, command-line) or Lightroom (paid, visual interface).
-
Open your image file in the tool of your choice.
-
Locate the IPTC metadata fields (in Lightroom, it's under Edit → Copyright & Contact Info).
-
Add a "Do Not Use" or usage rights restriction in the appropriate metadata field depending on your tool's options.
-
Add copyright registration data—your name, registration number, and creation date—to the same metadata block.
-
Save the file and re-upload to your portfolio or website.
-
Repeat for your entire portfolio (batch processing tools can speed this up; ExifTool supports bulk edits).
This takes 30 minutes for a portfolio of 50 images. Do it now.
Which opt-out mechanisms to consider in 2026
Opt-out policies differ significantly across platforms and jurisdictions. The European Union mandates that opt-out choices be respected under its text-and-data-mining exemptions, while the United States currently permits companies to make their own decisions about honoring creator preferences.
- Spawning AI registry: A database designed to catalog creators' preferences and transmit opt-out signals to participating AI training operators.
- Cloudflare AI crawler blocking: Add AI-specific blocking rules to your website's robots.txt; Cloudflare's dashboard provides tools for this configuration.
- robots.txt blocking: Manually block crawlers by adding specific user-agent rules like
User-agent: ChatGPT-UserandDisallow: /to your site's root robots.txt file.
The catch: opt-outs only work if platforms respect them. They're not legally binding in most jurisdictions yet. But they create accountability.
Monitoring for AI copies of your work
Set up Google Alerts for your artist name and perform reverse-image searches of your work on a regular basis. Tools like Glaze and Nightshade insert subtle, invisible modifications into your images that cause AI models trained on your protected versions to produce visibly flawed outputs.
Combine these three tactics. The goal isn't immunity—it's evidence. When you register your copyright, set metadata, and document attempts to opt out, you're building a case for damages if infringement happens.
Next in this series: Part 6 covers what happens when protection fails—the new insurance products and legal funds creators are using to fight back.
References
- IPTC Photo Metadata Standard — IPTC
- Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models — University of Chicago
- Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Models — University of Chicago
- U.S. Copyright Office AI Policy — U.S. Copyright Office
- Cloudflare AI Gateway Documentation — Cloudflare
