DPC Launches Inquiry into X’s Use of Personal Data for AI Training
Ireland’s data protection authority – the Data Protection Commission (DPC) – has initiated an inquiry into the processing of personal data by X Internet Unlimited Company (XIUC). This inquiry focuses on the use of publicly accessible posts made by EU/EEA users on the ‘X’ social media platform for training generative artificial intelligence models, specifically the Grok Large Language Models (LLMs). The investigation will assess whether the processing of this personal data complies with key provisions of the General Data Protection Regulation (GDPR), particularly concerning the legality and transparency of the data processing activities.
Grok LLMs, developed by xAI, serve various functions, including powering a generative AI querying tool and chatbot available on the X platform. These models are trained on diverse data sets, which include a subset of personal data controlled by XIUC. The inquiry will scrutinize the use of this personal data, ensuring that it was processed in accordance with GDPR requirements, particularly focusing on the rights of EU/EEA users.
The DPC’s decision to conduct this inquiry under Section 110 of the Data Protection Act 2018 was communicated to XIUC earlier this week. The inquiry aims to clarify whether the personal data sourced from publicly accessible posts was lawfully utilized for training purposes. This investigation highlights the ongoing scrutiny of data processing practices in the context of AI development and the importance of adhering to data protection regulations.
The inquiry reflects the DPC’s commitment to enforcing GDPR compliance and protecting the privacy rights of individuals within the EU/EEA. As AI technologies continue to evolve, the implications of data processing practices remain a critical concern for regulators, companies, and users alike.
