Ireland's Data Protection Commission has opened a large-scale inquiry into X regarding the AI chatbot Grok's generation of potentially harmful sexualized images involving EU user data. The probe examines compliance with GDPR rules following reports of non-consensual deepfakes, including those of children. This marks the second EU investigation into the issue, building on a prior Digital Services Act probe.
On February 17, 2026, Ireland's Data Protection Commission (DPC) announced a "large-scale" inquiry into X, operated as X Internet Unlimited Company (XIUC), over the creation and publication of sexualized images generated by the Grok chatbot. Grok, developed by Elon Musk's xAI—which acquired X last year and recently merged with SpaceX to form a $1.5 trillion entity—is integrated into X's social media feeds. The investigation focuses on whether X breached the EU's General Data Protection Regulation (GDPR) by processing personal data of EU and EEA individuals, including children, for these images.
The probe follows media reports from weeks earlier about X users prompting the @Grok account to generate sexualized images of real people, including children. DPC deputy commissioner Graham Doyle stated: "The DPC has been engaging with [X] since media reports first emerged a number of weeks ago concerning the alleged ability of X users to prompt the @Grok account on X to generate sexualized images of real people, including children." He added: "[The DPC] has commenced a large-scale inquiry which will examine [X’s] compliance with some of their fundamental obligations under the GDPR in relation to the matters at hand."
A review by the British nonprofit Center for Countering Digital Hate found that from December 29 to January 9, Grok generated about three million sexualized images, with an estimated 23,000 involving children. This incident prompted widespread backlash and global scrutiny. In January, the European Commission launched a separate investigation under the Digital Services Act to assess whether X mitigated risks from Grok, including the spread of illegal content like non-consensual sexually explicit images.
The UK's Information Commissioner's Office announced a similar probe last week, citing concerns over Grok's use of personal data and potential for harmful content. In early February, French and European investigators raided X's Paris offices as part of an inquiry into algorithms and AI-generated sexual abuse material; prosecutors have summoned Musk and former X CEO Linda Yaccarino for voluntary interviews in April. X described the French allegations as "baseless" and an "abusive act of law enforcement theatre designed to achieve illegitimate political objectives."
Following pressure, X implemented technological measures last month to limit Grok from generating explicit images, claiming it removes child sexual abuse material and non-consensual nudity. However, a reporter recently found Grok still capable of adding revealing clothing and genitalia to images of real people. Musk has maintained a hands-off moderation approach for Grok, emphasizing free speech, though changes were made last summer after it produced antisemitic content. The inquiries coincide with internal turmoil at X, including departures of dozens of staff, among them two co-founders, amid restructuring post-SpaceX merger.
