X Complies with EU Data Laws by Halting AI Chatbot Data Collection

Investigation into X Concludes

The investigation into social media platform X by the European Union has officially come to an end. This follows X's agreement to adhere to the compliance requirements set forth by the European Data Protection Commission (DPC).

On September 4, X consented to stop using personal data from users based in the European Union and European Economic Area (EEA). Prior to this, X utilized this data to train its artificial intelligence chatbot, Grok.

Data Erasure in the EU

The court mandated that Twitter International, the company responsible for X's operations, permanently adhere to the data collection requests. X committed to erasing previous data from May 7 to August 1 and agreed not to collect any additional data for the purpose of developing, enhancing, or training Grok.

The initial complaint was filed by the DPC, citing a risk to the "fundamental rights and freedoms of individuals." According to the EU data watchdog, this marked the first time it had to take such action and invoke its powers under Section 134 of the 2018 Data Protection Act.

The DPC's Role in Data Protection

DPC Commissioner Des Hogan expressed his approval of the outcome, stating that it safeguards the rights of EU and EEA citizens. He further commented on the DPC's role in protecting citizen data, stating that one of their primary roles as an independent regulator and rights-based organization is to ensure the best outcome for data subjects. He also noted that the action taken demonstrates the DPC's commitment to taking appropriate action when necessary.

Before agreeing to the conditions, Twitter International denied the DPC's allegations, stating that it met all of the EU's General Data Protection Regulation requirements. The company even referred to the orders as "draconian" and claimed they hindered crucial functions of the platform in the region. However, since X agreed to the measures, the case has been dismissed.

X's Ongoing Global Battles

The case against the DPC is not the only battle X is currently involved in. On August 30, regulators in Brazil suspended X in the country after the platform's owner, Elon Musk, refused to name a legal representative for the firm in Brazil. The Brazilian Supreme Court upheld the order on September 2 in a unanimous decision by five justices.

Musk has hinted to X users in Brazil that they should defy the judge’s ruling against using VPNs to access the platform despite the potential fines. He has also previously criticized Brazilian Supreme Court Judge Alexandre de Moraes, accusing him of being "evil" and a "dictator" for allegedly engaging in "illegal political censorship" on X.

Bottom Line

The case of X's compliance with EU data laws highlights the ongoing tension between tech companies and data protection regulations. It raises questions about the balance between innovation and privacy, and the role of global tech companies in respecting regional laws and regulations. What are your thoughts on this matter? Feel free to share this article with your friends and discuss. Also, don't forget to sign up for the Daily Briefing, which is delivered every day at 6pm.