This paper evaluates whether the EU’s Democratic Defense Package creates an adequate legal framework to address the risks posed by Deepfakes. The legal framework examined is the Digital Services Act (DSA), Artificial Intelligence Act (AIA), and GDPR adequately address the democratic risks posed by deepfakes. It identifies two main threats: synthetic media impersonating real people and bot-generated fake accounts. Both forms, distort political discourse, spread misinformation, and undermine electoral integrity. The AIA provides a structured framework for regulating manipulative AI systems, effectively classifying bots as deceptive tools but insufficiently covering private deepfake creators. The DSA enhances transparency and accountability for platforms but remains constrained by its focus on “illegal content,” national fragmentation, and weak enforcement mechanisms. Similarly, while the GDPR offers theoretical protection for individuals’ data rights, its effectiveness is limited in political contexts. Together, these frameworks establish a foundation for addressing digital manipulation but leave significant regulatory and enforcement gaps. Strengthening oversight of private deployers, clarifying the balance between harm and illegality, and improving response times to deepfakes are essential for safeguarding democratic discourse in the EU.