X’s Grok deepfake imagery draws GDPR enforcement scrutiny

Ars Technica
Ars Technica 10h EU, Ireland
Ireland’s Data Protection Commission opened a “large-scale” GDPR inquiry into X/xAI over Grok’s creation and publication of sexualized AI-generated images involving EU user data.
X’s Grok deepfake imagery draws GDPR enforcement scrutiny
Why it matters
A formal DPC inquiry can compel information requests and corrective actions, creating near-term pressure on X to change Grok’s data processing and safety controls for EU users. The scope explicitly targets “fundamental obligations” under GDPR, raising the risk of orders that restrict how EU personal data is used to generate or distribute synthetic sexual imagery. The move also signals that AI-generated non-consensual sexual content is being treated as a data-protection compliance issue, increasing enforcement exposure for other platforms offering in-feed generative tools in the EU.
TOPICS

Law & Public Safety Regulatory Actions Data Privacy Technology & Innovation Artificial Intelligence

Be prepared — without the noise

Calm, decision-grade intelligence that flags material changes before they become social knowledge—so you can update assumptions, not chase headlines.

DECISION-GRADE INTELLIGENCE

Get decision-grade intelligence in your inbox

A high-signal brief covering what changed — and what matters — delivered by email.

A handful of briefs — before your coffee gets cold.

No spam. Unsubscribe anytime. We don’t sell your email.