X (Twitter) — Enforcement

X enabled a default opt-in that automatically shared users' public posts with xAI for Grok training, without prominent notice. The opt-out was buried deep in settings. EU users were included under a 'legitimate interest' basis. The Irish DPC took X to Ireland's High Court, securing an emergency order. X agreed to permanently suspend processing EU/EEA user data for Grok training, though was not required to delete models already trained on that data.