On 15 January 2026, the Office of the Privacy Commissioner for Personal Data (PCPD) announced that it is proactively contacting the organisation responsible for the artificial intelligence (AI) chatbot Grok to investigate its potential for generating indecent or malicious content. The PCPD expressed concern regarding reports that the chatbot could be utilised to produce indecent photos and videos, which may contravene the Personal Data (Privacy) Ordinance (PDPO) and its 6 Data Protection Principles. The authority noted that the improper or malicious use of AI technologies for such purposes may constitute criminal offences. The PCPD also reminded the public that providing personal data to AI chatbots to generate content requires strict compliance with the PDPO, including obtaining the express and voluntary consent of individuals whose data is processed. Furthermore, the regulator cautioned against the generation of illegal content, such as child pornography, which violates the Prevention of Child Pornography Ordinance. To support safe AI usage, the PCPD highlighted its existing guidance materials, including the 10 TIPS for Users of AI Chatbots and a toolkit for schools and parents on AI deepfakes. These resources aim to protect personal data privacy and alert users to inaccurate, infringing, or biased AI-generated content.
Original source