investigationOngoing
Data Protection Commission (DPC) — X Internet Unlimited Company (Grok)
April 11, 2025 · Ireland
The DPC commenced an inquiry into X's processing of EU/EEA users' public posts to train its Grok large language models, examining the lawfulness of using personal data from publicly accessible posts for generative-AI training.
Key takeaway — how to prevent this
AI services need a lawful basis, transparency and (for minors) age verification before launch in regulated markets — several DPAs blocked AI products first and asked questions later.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.