The probe is into xAI and X Internet Unlimited Company – the Dublin-based data controller for X in the European Union or the European Economic Area, the Information Commissioner’s Office said in a statement.
The statement follows reports that Grok had been used to generate non‑consensual sexual imagery of individuals, including children.
Would help if our own government and politicians would get off X, but they all still use it.
Just ban it already, it’s a cesspit of disinformation run by a fraud. Why the hell are UK agencies still using this?
Do you think it’s coincidence their office in France is raided on the same day? Coordinated move by European governments.
A PAEDOFILE creates an app that undresses children and Women what could go wrong🤔
Not that I particularly like Grok, but it won’t do anything. The likes of Musk are in a bracket no matter law you throw at them, you can’t touch them.
Assuming this is a GDPR violation they’re investigating, which has fines of up to 4% of global revenue, I wonder if Musk has just screwed himself by merging X/xAI with SpaceX. If they base it off the parent company that could have increased potential fines from around $4m to $640m.
Ofcom can only investigate X and cannot investigate Grok AI because it’s not covered by the law changes. Huge gap there with the direction of travel with Generative AI.
William Malcolm, Executive Director Regulatory Risk & Innovation at the Information Commissioner’s Office, said:
“The reports about Grok raise deeply troubling questions about how people’s personal data has been used to generate intimate or sexualised images without their knowledge or consent, and whether the necessary safeguards were put in place to prevent this. Losing control of personal data in this way can cause immediate and significant harm. This is particularly the case where children are involved.
“Our role is to address the data protection concerns at the centre of this, while recognising that other organisations also have important responsibilities. We are working closely with Ofcom and international regulators to ensure our roles are aligned and that people’s safety and privacy are protected. We will continue to work in partnership as part of our coordinated efforts to create trust in UK digital services.
“Our investigation will assess whether XIUC and X(dot)AI have complied with data protection law in the development and deployment of the Grok services, including the safeguards in place to protect people’s data rights. Where we find obligations have not been met, we will take action to protect the public.”
What about **all** the other LLM’s with the same features?
Maybe just enforce GDPR properly and this will all go away. Too many online harms depend on GDPR violatons to work
Did Reuters read the ofcom press release?
> **We are not investigating xAI at this time**
>
>When we opened our investigation into X, we said we were assessing whether we should also investigate xAI, as the provider of the standalone Grok service. We continue to demand answers from xAI about the risks it poses. We are examining whether to launch an investigation into its compliance with the rules requiring services that publish pornographic material to use highly effective age checks to prevent children from accessing that content.
12 comments
[Reuters reports](https://uk.news.yahoo.com/uk-privacy-watchdog-launches-investigation-121304550.html): Britain’s privacy watchdog on Tuesday launched a formal investigation into Elon Musk’s xAI chatbot Grok over the processing of personal data and its potential to produce harmful sexualised images and video content.
The probe is into xAI and X Internet Unlimited Company – the Dublin-based data controller for X in the European Union or the European Economic Area, the Information Commissioner’s Office said in a statement.
The statement follows reports that Grok had been used to generate non‑consensual sexual imagery of individuals, including children.
Would help if our own government and politicians would get off X, but they all still use it.
Just ban it already, it’s a cesspit of disinformation run by a fraud. Why the hell are UK agencies still using this?
Do you think it’s coincidence their office in France is raided on the same day? Coordinated move by European governments.
A PAEDOFILE creates an app that undresses children and Women what could go wrong🤔
Not that I particularly like Grok, but it won’t do anything. The likes of Musk are in a bracket no matter law you throw at them, you can’t touch them.
Assuming this is a GDPR violation they’re investigating, which has fines of up to 4% of global revenue, I wonder if Musk has just screwed himself by merging X/xAI with SpaceX. If they base it off the parent company that could have increased potential fines from around $4m to $640m.
Ofcom can only investigate X and cannot investigate Grok AI because it’s not covered by the law changes. Huge gap there with the direction of travel with Generative AI.
William Malcolm, Executive Director Regulatory Risk & Innovation at the Information Commissioner’s Office, said:
“The reports about Grok raise deeply troubling questions about how people’s personal data has been used to generate intimate or sexualised images without their knowledge or consent, and whether the necessary safeguards were put in place to prevent this. Losing control of personal data in this way can cause immediate and significant harm. This is particularly the case where children are involved.
“Our role is to address the data protection concerns at the centre of this, while recognising that other organisations also have important responsibilities. We are working closely with Ofcom and international regulators to ensure our roles are aligned and that people’s safety and privacy are protected. We will continue to work in partnership as part of our coordinated efforts to create trust in UK digital services.
“Our investigation will assess whether XIUC and X(dot)AI have complied with data protection law in the development and deployment of the Grok services, including the safeguards in place to protect people’s data rights. Where we find obligations have not been met, we will take action to protect the public.”
[https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/ico-announces-investigation-into-grok/](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/ico-announces-investigation-into-grok/)
What about **all** the other LLM’s with the same features?
Maybe just enforce GDPR properly and this will all go away. Too many online harms depend on GDPR violatons to work
Did Reuters read the ofcom press release?
> **We are not investigating xAI at this time**
>
>When we opened our investigation into X, we said we were assessing whether we should also investigate xAI, as the provider of the standalone Grok service. We continue to demand answers from xAI about the risks it poses. We are examining whether to launch an investigation into its compliance with the rules requiring services that publish pornographic material to use highly effective age checks to prevent children from accessing that content.
https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/investigation-into-x-and-scope-of-the-online-safety-act