X Adheres to EU Data Laws by Ending AI Chatbot Data Collection

Social media platform X, formerly Twitter, has complied with European Union data protection regulations, concluding an investigation by the European Data Protection Commission (DPC).

As of September 4, X agreed to stop using personal data from users in the EU and the European Economic Area (EEA) for training its artificial intelligence chatbot, Grok.

EU Data Erasure and Future Compliance

The company has committed to deleting data collected between May 7 and August 1. Moving forward, X will not gather data for enhancing or training Grok.

The DPC's initial complaint highlighted concerns about potential violations of individual rights. This action marks the first time the DPC has invoked Section 134 of the 2018 Data Protection Act.

DPC Commissioner Des Hogan welcomed the resolution, emphasising its importance for protecting the rights of EU and EEA citizens. Hogan reaffirmed the DPC’s role in safeguarding data subjects' rights and noted that this case demonstrates the commission's dedication to enforcing data protection standards.

X's Response and Legal Challenges

Before agreeing to these conditions, X rejected the DPC's allegations, arguing that it was in compliance with GDPR requirements and labelled the orders as overly restrictive. The case has since been dismissed following X's acceptance of the compliance measures.

Other Regulatory Issues

In addition to EU data laws, X faces challenges in Brazil. On August 30, Brazilian regulators suspended the platform after owner Elon Musk refused to designate a legal representative for the company in Brazil. This suspension was upheld by the Brazilian Supreme Court on September 2.

Read more: Elon Musk's Non-Compliance to Local Laws Sparks X Ban in Brazil, Over 22 Million Users Affected

Musk has encouraged Brazilian users to bypass the court’s ruling using VPNs, despite potential fines. He has also criticised Brazilian Supreme Court judge Alexandre de Moraes, accusing him of political censorship.

X’s compliance with EU regulations addresses important data protection concerns but highlights ongoing challenges with global regulatory compliance, potentially impacting its operations and user base.