Data Privacy Commission Launches Inquiry
Ireland’s Data Protection Commission (DPC) has announced an investigation into X, the social media platform owned by Elon Musk, over its alleged use of personal data from European users to train its artificial intelligence (AI) chatbot, Grok. The inquiry focuses on whether X unlawfully processed publicly accessible posts to train its AI models, as part of compliance with the European Union’s stringent General Data Protection Regulation (GDPR).
Scraping Data for AI Models
The investigation centers on X’s use of personal data that includes social media posts shared by users. These posts were reportedly used to train Grok, a large language model (LLM) powered by generative AI technology. LLMs like Grok are built by scraping vast amounts of text, including articles, blog posts, and other publicly available online content. The DPC’s investigation will explore whether this method of collecting and using personal data aligns with the legal framework set by the GDPR.
GDPR’s Impact and the Role of the DPC
The GDPR is known for its strict provisions around data privacy and consent, especially in the context of personal data used for AI training. As the lead regulator for tech companies operating in Europe, the DPC is responsible for ensuring that organizations like X adhere to the privacy laws protecting European citizens’ data. With X’s European headquarters based in Dublin, the DPC has jurisdiction to assess whether the company has complied with these regulations.
Consequences of Non-Compliance
The DPC has significant enforcement powers, including the ability to impose hefty fines on companies found in violation of the GDPR. Penalties can reach up to 20 million euros or 4% of a company’s annual global revenue, whichever is greater. As the scrutiny around AI companies increases, especially regarding the use of personal data for training AI models, the stakes are high for platforms like X.
X’s Response
As of now, X has not responded to inquiries from the media regarding the investigation. The company is facing mounting pressure from regulators globally to be more transparent about its data practices, especially as it continues to expand its use of AI technologies.