Canada: Office of the Privacy Commissioner found X in breach of Personal Information Protection and Electronic Documents Act consent and appropriateness requirements in relation to the generation of sexualised deepfakes

Description

Office of the Privacy Commissioner found X in breach of Personal Information Protection and Electronic Documents Act consent and appropriateness requirements in relation to the generation of sexualised deepfakes

On 11 June 2026, the Office of the Privacy Commissioner of Canada (OPC) found that X Corp., the operator of the social media platform X, and X.AI LLC (xAI), the developer of the generative AI chatbot Grok, breached the Personal Information Protectio…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
platform intermediary: user-generated content
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2025-02-27
under deliberation

On 27 February 2025, the Office of the Privacy Commissioner of Canada (OPC) opened an investigation…

2026-01-15
under deliberation

On 15 January 2026, the Office of the Privacy Commissioner of Canada expanded an ongoing investigat…

2026-06-11
under investigation

On 11 June 2026, the Office of the Privacy Commissioner of Canada (OPC) found that X Corp., the ope…