Europe’s top privacy regulator has launched a large-scale X Grok AI probe, intensifying scrutiny of Elon Musk’s social media platform over the creation and spread of AI-generated sexualised images. The investigation reflects growing global concerns about AI misuse, user data protection and regulatory compliance.

Ireland’s Data Protection Commission (DPC), responsible for enforcing the European Union’s General Data Protection Regulation (GDPR), confirmed it is examining whether X violated privacy rules through the creation and publication of harmful AI-generated content involving EU users.

X Grok AI Probe Targets AI-Generated Sexualised Content

The X Grok AI probe focuses on the chatbot Grok, which is integrated directly into X’s platform and developed by Musk’s AI company xAI. Regulators are examining the generation of non-consensual sexual imagery, including content involving real individuals and minors.

The DPC said the inquiry will assess whether X properly handled EU user data while generating and distributing such images. The watchdog described the investigation as “large-scale” and aimed at reviewing compliance with core GDPR obligations.

According to Graham Doyle, deputy commissioner of Ireland’s Data Protection Commission, authorities began engaging with X after reports surfaced that users could prompt Grok to generate sexualised images of real people, including children.

Growing Global Scrutiny Over Grok and AI Safety

The X Grok AI probe follows widespread backlash after thousands of sexualised deepfake images were reportedly created using the chatbot earlier this year. The controversy sparked concerns among safety experts, policymakers and users about AI misuse and platform responsibility.

The investigation also comes amid broader regulatory action against X. French authorities recently searched the company’s Paris offices as part of a separate inquiry into algorithmic operations and the spread of AI-generated abuse material. French prosecutors have summoned Elon Musk and former X CEO Linda Yaccarino for voluntary interviews in April.

Meanwhile, the UK’s Information Commissioner’s Office has opened its own investigation, citing serious concerns about Grok’s handling of personal data and its potential to generate harmful visual content.

GDPR Compliance Under Review

A central focus of the X Grok AI probe is whether X complied with the European Union’s GDPR framework. The regulation requires companies to process personal data lawfully, incorporate privacy safeguards during product development and conduct risk assessments before launching high-risk technologies.

The European Union has also launched a separate investigation into xAI under the Digital Services Act, which mandates large technology platforms to prevent the spread of illegal and harmful content online.

Regulators are examining whether X adequately implemented privacy protections and content safeguards before rolling out AI features such as Grok.

X’s Response and Platform Changes

Facing mounting pressure from governments and regulators, X introduced new technical measures last month designed to limit Grok’s ability to generate explicit images. The company maintains that it removes child sexual abuse material and non-consensual content.

Following the French investigation, X rejected allegations of wrongdoing, calling them baseless and describing enforcement actions as politically motivated.

The X Grok AI probe also comes during a period of internal restructuring at the company. Musk recently announced organizational changes following xAI’s merger with SpaceX, which created a combined entity valued at approximately $1.5 trillion.

As global authorities intensify oversight of AI systems, the investigation highlights the growing tension between rapid AI innovation, free speech claims and regulatory demands for stronger privacy and safety protections.