Ireland DPC v. X Corp: First EU Halt of AI Training Data Use

Summary

The Irish DPC, acting as X Corp.'s EU lead supervisory authority, used emergency High Court powers for the first time ever to halt X's use of EU/EEA users' public posts to train its Grok AI chatbot. X had been collecting posts without user consent or adequate legal basis since May 2024.

Details

• Violation: Unlawful AI training data collection from EU users
• Penalty: No monetary penalty — permanent cessation undertaking
• Framework: GDPR (Articles 5, 6)
• Status: Enforced — X permanently ceased using EU/EEA data for Grok training (August 2024)

Key Takeaways

1. First use of emergency injunctive powers by an EU DPA against AI training
2. First regulatory halt of an AI training program by an EU data protection authority
3. Public posts are personal data under GDPR when used for AI training
4. Social media platforms cannot use EU user data for AI training without legal basis

Outcome

X permanently undertook to cease using EU/EEA user data for Grok AI training. Proceedings were struck out after X agreed to the binding court undertaking.