ICO launches probe Into X over Grok AI sexual image claims
At the same time, investigators raid the Paris office of X
The ICO launched a formal investigation into X after allegations that its Grok AI tool generated non-consensual sexual images, as French authorities simultaneously raided X’s Paris office over related criminal concerns.
The UK's data protection regulator has opened a formal investigation into Elon Musk's social media platform X over allegations that its Grok AI tool was used to generate non-consensual sexual images using real people's data.
The Information Commissioner's Office (ICO) said it is examining whether X and its Irish subsidiary processed personal data lawfully after reports emerged that Grok had created sexually explicit images using photographs of individuals, usually women, without their consent.
The watchdog confirmed it had contacted X and its AI arm, xAI, on 7th January seeking urgent details about safeguards in place to prevent such misuse.
Following public criticism from victims, online safety advocates and politicians, the company later stated it had intervened to restrict the practice.
In a statement, the ICO said the reported incidents raised "serious concerns under UK data protection law" and posed a risk of "significant potential harm to the public."
"These concerns relate to whether personal data has been processed lawfully, fairly and transparently, and whether appropriate safeguards were built into Grok's design and deployment," the regulator said.
It warned that failures could leave individuals exposed to serious harm, particularly children.
William Malcolm, the ICO's head of regulatory risk and innovation, said the allegations raised "deeply troubling questions" about how personal data may have been used to create intimate or sexualised images without consent.
"Losing control of personal data in this way can cause immediate and significant harm," he said.
The ICO's probe is being conducted alongside the UK communications regulator Ofcom, which said it continues to treat the issue as a matter of urgency.
However, in an updated statement on the investigation, Ofcom acknowledged it lacks sufficient powers to directly investigate chatbot-generated illegal images, prompting the ICO to take the lead on data protection grounds.
If breaches are confirmed, the ICO has the authority to impose fines of up to £17.5 million or 4% of a company's global annual turnover.
French authorities raid X offices
The UK investigation comes as pressure mounts on X elsewhere in Europe.
On Tuesday, French prosecutors confirmed that investigators raided the company's Paris offices as part of a criminal inquiry launched in January.
The Paris prosecutor's office said the investigation was opened after a lawmaker alleged that biased algorithms on X may have distorted automated data processing systems.
Searches were carried out by the cybercrime unit, and both Elon Musk and former X chief executive Linda Yaccarino have been summoned to hearings scheduled for April.
French authorities said they are examining whether X has committed multiple offences, including complicity in the possession or organised distribution of child sexual abuse material and infringement of image rights through sexual deepfakes.
The prosecutor's office also announced it would stop using X and instead communicate through LinkedIn and Instagram.
Musk described the raid as a "political attack" in a post on X.
The company said it was "disappointed but not surprised," accusing French prosecutors of an "abusive act" and denying any wrongdoing. X added that the raid "endangers free speech."
The controversy has also drawn the attention of Brussels. In late January, the European Commission said it had opened a formal investigation into xAI amid concerns over the generation of the images. A Commission spokesperson said it was in contact with French authorities following the Paris search.