The investigation follows reports that Grok has been used to generate non‑consensual sexual imagery of individuals, including children. The reported creation and circulation of such content raises concerns under UK data protection law and presents a risk of significant potential harm to the public.  

These concerns relate to whether personal data has been processed lawfully, fairly and transparently, and whether appropriate safeguards were built into Grok’s design and deployment to prevent the generation of harmful manipulated images using personal data. 

William Malcolm, executive director regulatory risk & innovation at the Information Commissioner’s Office, said: “The reports about Grok raise deeply troubling questions about how people’s personal data has been used to generate intimate or sexualised images without their knowledge or consent, and whether the necessary safeguards were put in place to prevent this. Losing control of personal data in this way can cause immediate and significant harm. This is particularly the case where children are involved.”

He added: “Our investigation will assess whether XIUC and X.AI have complied with data protection law in the development and deployment of the Grok services, including the safeguards in place to protect people’s data rights. Where we find obligations have not been met, we will take action to protect the public.”

Meanwhile, X’s French headquarters were yesterday raided at the behest of the cybercrime unit of the Paris public prosecutor’s office, in collaboration with national law enforcement and in the presence of Europol.

In a statement, prosecutors said the potential offences they are investigating include complicity in the possession and dissemination of child sexual abuse material, as well as offences relating to sexual deepfakes, Holocaust denial and misuse of personal data.

Mr Musk and former X CEO Linda Yacarino have been invited to take part in voluntary interviews in Paris on 20 April, while X employees have also been invited to make witness statements over four days in April.

“At this stage, the conduct of this investigation is part of a constructive approach, with the ultimate aim of ensuring the compliance of platform X with French laws, given that it operates on national territory,” prosecutors said in a statement.

X has accused French authorities of carrying out a “politicised criminal investigation” and described the raid as “an abusive act of law enforcement theatre designed to achieve illegitimate political objectives”.

“The allegations underlying today’s raid are baseless and X categorically denies any wrongdoing,” it added.