X automatically harvests user data to train Grok chatbot

Elon Musk's social media platform X (formerly Twitter) came under fire for automatically harvesting user data to train its AI chatbot, Grok, without notifying users or obtaining their consent.

X enabled a setting by default that allows user posts and interactions to be used for training Grok. Users are automatically opted in without explicit consent, violating data protection norms in the EU, UK and elsewhere.

Many users discovered the setting only after it was pointed out on social media, leading to concerns about transparency.

The finding attracted regulatory attention in the EU and UK, with authorities criticising X for using "pre-ticked boxes" and other methods of default consent, which are prohibited under their data protection laws. Furthernore, users can only opt out of X's data sharing policy via the web version of X, making it less accessible.

Others argued X's AI data sharing may constitute copyright infringement and lead to violations of users' privacy.

➕ August 2024. Two European consumer organisations filed a legal complaint that Grok violates the General Data Protection Regulation (GDPR). The following day Ireland's privacy watchdog initiated court proceedings against the platform.