Data Protection Commission Opens Investigation into X (XIUC) Over AI-Generated Intimate Images (dataprotection.ie)

• DPC opens investigation under Section 110 of Data Protection Act 2018
• Probe focuses on AI-generated intimate/sexual images via Grok on X platform
• Concerns include processing of EU/EEA data subjects' personal data, including children

"The Irish Data Protection Commission (DPC) has launched a statutory investigation into X Internet Unlimited Company (XIUC) under Section 110 of the Data Protection Act 2018. The probe concerns the alleged creation and publication of intimate and/or sexual images, potentially harmful and non-consensual, using the Grok large language model on X's platform. The DPC will examine whether XIUC complied with GDPR obligations including lawful processing (Art. 6), data protection by design (Art. 25), and data protection impact assessments (Art. 35), particularly regarding EU/EEA data subjects including children. XIUC was notified on 16 February 2026."