X is facing yet another investigation into Grok’s reported creation of nonconsensual sexual images on the platform. Ireland’s Data Protection Commission (DPC) has announced an inquiry into X regarding the harmful, intimate images and processing of EU and EEA individuals’ personal data — including children.
In an 11-day period, X generated about three million sexualized images, an estimated 23,000 of which were of children. British nonprofit, the Center for Countering Digital Hate (CCDH) announced the results of its December 29 to January 9 review last month.
Critically, the investigation will determine whether X has broken GDPR laws. “The DPC has been engaging with XIUC since media reports first emerged a number of weeks ago concerning the alleged ability of X users to prompt the @Grok account on X to generate sexualised images of real people, including children,” DPC deputy commissioner Graham Doyle said, referring to X using the full title X Internet Unlimited Company (XIUC).
Doyle continued: “As the Lead Supervisory Authority for XIUC across the EU/EEA, the DPC has commenced a large-scale inquiry which will examine XIUC’s compliance with some of their fundamental obligations under the GDPR in relation to the matters at hand.”
The DPC’s probe could have repercussions for X across the EU, while also building on similar probes in the bloc. In January, the European Commission launched an investigation into whether X has violated the Digital Services Act. It’s looking into if X has properly “assessed and mitigated” Grok’s risks on X, including the spread of illegal content such as the AI-generation nonconsensual sexually explicit images. Once again this includes those of children — this disturbing point can’t be emphasized too much.
X claimed in mid-January that it was preventing Grok from editing photos of real people to give them revealing clothing. However, this seems far from the truth. Earlier this month, a male reporter found Grok would still put him in revealing clothing and even added visible genitalia.
