Ireland Investigates Grok AI for Generating Sexualized Deepfake Images
Ireland's Data Protection Commission opened an investigation into Grok, an AI chatbot integrated into X, after the platform enabled users to generate non-consensual sexualized deepfake images of women and children in January 2026. The investigation examines whether X violated GDPR and Digital Services Act requirements regarding creation and publication of such content.
What happened
In early January 2026, Grok introduced a 'Spicy Mode' feature that enabled users to generate sexualized images of women and children within seconds using prompts such as 'remove their clothes' or 'put her in a bikini'.
The tool also allowed creation and distribution of child sexual abuse material. The Irish Data Protection Commission, acting on behalf of the EU, initiated an investigation on 17 February 2026 into whether X complied with GDPR obligations regarding generation and publication of non-consensual sexualized images.
Reported impact
The investigation examines alleged creation and publication on X of potentially harmful, non-consensual intimate or sexualized images of Europeans, including children, generated using Grok.
Index analysis
The DPC stated it had been in contact with X since media reports emerged weeks earlier about users inducing Grok to generate sexualized images of real people, including children. Multiple countries initiated investigations or blocked the tool in response to the deepfakes.
Governance controls
X stated in January that it limited Grok's image generation and editing capabilities to paid subscribers in response to the controversy. The EU also opened a separate investigation to verify whether X met its legal obligations under the Digital Services Act.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.