Ireland's Data Protection Commission (DPC) has launched a formal investigation into X (formerly Twitter) over the generation of sexual deepfake images using its AI chatbot Grok. The investigation, announced on February 17, 2026, could result in massive fines for Elon Musk's company.
What Grok actually did
Grok, the AI chatbot integrated into the X platform, was used to generate millions of non-consensual sexualized images, including content involving minors. According to data from the Center for Countering Digital Hate (CCDH) and The New York Times:
- Grok generated and shared over 4.4 million images within a 9 to 11-day period
- Between 41% and 65% of the generated content was sexual in nature
- Thousands of these images involved minors
- The images were created using Grok's enhanced image-editing features
What the Irish DPC is investigating
Since X has its European headquarters in Dublin, Ireland's DPC acts as the lead supervisory authority for the entire European Union. The investigation focuses on:
- GDPR Article 5: Principles of personal data processing
- Article 6: Lawfulness of data processing
- Article 25: Data protection by design and by default
- Article 35: Data protection impact assessment
In other words, the DPC wants to determine whether X processed EU citizens' data illegally, implemented adequate safeguards before launching Grok, and assessed the associated risks.
What fines could X face
If GDPR violations are confirmed, X could face fines of up to 4% of its global annual turnover. Given the platform's revenue, this could translate into hundreds of millions of dollars.
Additionally, the DPC could order X to suspend Grok's image generation features across the entire European Union.
It is not just Ireland: global investigations
Ireland joins a growing list of countries and bodies investigating X over Grok:
- European Commission: Investigation under the EU AI Act
- United Kingdom: ICO and Ofcom have opened cases
- Australia, Canada, India, Indonesia, and Malaysia: Also investigating the platform
Why this matters to you
Even if you don't use Grok directly, this situation has important implications:
- Your image could be used: Grok can generate images based on public photos available on X
- Children at risk: If you have photos of minors on social media, they could be used to generate inappropriate content
- Regulatory precedent: This investigation will set a precedent for how AI image generators are regulated
How to protect yourself
- Review your X privacy settings: Set your account to private if you are concerned about Grok using your data
- Disable AI training: On X, go to Settings > Privacy > Grok and disable the use of your data for AI training
- Report content: If you find deepfakes of yourself or someone you know, report them immediately to the platform and authorities
- Limit public photos: Reduce the number of personal photos publicly available on social media
What happens next
The DPC investigation could take months to conclude, but international pressure is mounting. The UK has already ordered platforms to remove AI-generated intimate images within 48 hours or face severe penalties.
This situation puts a fundamental question at the center of debate: how far should AI companies go to prevent abuse of their technology?
