X probed by Irish data regulator over Grok images

Ireland’s data protection regulator has launched a “large-scale inquiry” into X over the publication of alleged child sexual abuse material.

The inquiry comes after reports that child sexual abuse material and non-consensual intimate images of adults were generated through the Grok artificial intelligence (AI) tool and disseminated on the platform.

The Data Protection Commission (DPC) said its inquiry concerns the apparent creation and publication on X of such material containing or involving the “processing of personal data of EU/EEA data subjects”, including children.

It said the inquiry will specifically look at the material which was apparently created using generative artificial intelligence functionality associated with the Grok large language model via the @Grok account on X.

The X Internet Unlimited Company (XIUC) was notified of the inquiry on Monday.

The DPC will examine whether the company has complied with GDPR obligations around processing and data protection.

Deputy Commissioner Graham Doyle said: “The DPC has been engaging with XIUC since media reports first emerged a number of weeks ago concerning the alleged ability of X users to prompt the @Grok account on X to generate sexualised images of real people, including children.

“As the lead supervisory authority for XIUC across the EU/EEA, the DPC has commenced a large-scale inquiry which will examine XIUC’s compliance with some of their fundamental obligations under the GDPR in relation to the matters at hand.”

Meanwhile, the European Commission is investigating the social media company over the allegations of the AI-generated abuse material.

Ireland’s media regulator, Coimisiun na Mean, is collaborating with the Commission’s inquiry under the Digital Service Act but has chosen not to open its own investigation into the platform under the Online Safety Code.