Ireland’s privacy regulator is investigating X’s use of public data to train Grok

Ireland’s data privacy regulator is investigating Elon Musk’s X. The country’s Data Protection Commission (DPC) said on Friday (via Reuters) that it’s opening an inquiry into the social platform’s use of European users’ public posts to train its Grok AI chatbot. In this case, Ireland handles EU regulation enforcement because X’s European headquarters are in Dublin.

The DPC said it will probe “the processing of personal data comprised in publicly-accessible posts posted on the ‘X’ social media platform by EU/EEA users.” Under Europe’s General Data Protection Regulation (GDPR) rules, Ireland has the legal muscle to fine X up to four percent of its global revenue.

“The purpose of this inquiry is to determine whether this personal data was lawfully processed in order to train the Grok LLMs,” Ireland’s DPC said.

If this sounds familiar, the DPC took X to court in 2024, seeking an order to stop it from training Grok on EU user data without consent. That followed a platform policy change in July that let the social site use public posts to train its AI chatbot. However, Ireland’s data regulator ended the legal proceedings weeks later, saying the company had agreed to permanently limit its use of EU users’ personal data in Grok. The DPC hasn’t specified why it now believes the company may be violating GDPR rules.

The DPC’s last fine against the company (then known as Twitter) was a €450,000 penalty in 2020 for failing to notify the regulator about a data breach within the 72-hour window.