European Union: Filed Data Protection Commission lawsuit against X’s processing of personal data for training its AI tool Grok

On 8 August 2024, the Data Protection Commission (DPC) filed a lawsuit against X processing of personal data harvested from the public posts of its European Economic Area users between 7 May 2024 and 1 August 2024. The lawsuit was filed to the High Court under Section 134 of the Data Protection Act, 2018, aimed at protecting the rights and freedoms of data subjects across the EU/EEA. The application under Section 134 is the first one to be issued by the DPC or other Lead Supervisory Authority under the General Data Protection Regulation (GDPR). In particular, DPC is requesting the court to either stop or limit X's use of user data to train its AI systems. Additionally, the DPC intends to involve the European Data Protection Board (EDPB) for further review.