Britain’s Information Commissioner’s Office has embarked on an investigation concerning Elon Musk’s AI chatbot, Grok, following accusations that it generated sexualized images of children.

This AI tool, accessible as both a standalone platform and an integration with the social network X, sparked widespread controversy. Users reportedly engaged the chatbot to remove clothing from images of real women without their consent.

The Internet Watch Foundation, a digital watchdog, reported that alongside altering images of adult women into states of undress, the AI developed by Musk also produced inappropriate sexualized depictions of minors.

In response, the Information Commissioner’s Office has initiated a probe into xAI, the parent company of X, scrutinizing Grok’s handling of personal data and its capability to generate harmful sexualized image and video content.

This investigation coincides with ongoing assessments by internet regulator Ofcom, which is determining if X violated the Online Safety Act by permitting the distribution of deepfake images on its platform.

Additionally, French prosecutors raided the offices of X today as part of their investigation into whether Grok facilitated the dissemination of child pornography and deepfakes. The European Commission is also conducting its own inquiry into the chatbot’s activities.

The ICO said that the reported creation and circulation of non-consensual images of adults and children raised ‘serious concerns under UK data protection law and presents a risk of significant potential harm to the public’.

Pressure is growing on Elon Musk to curb AI chatbot Grok amid reports that it has been used to generate sexualised deepfakes of women and children

The use of Grok to undress women and children has sparked a huge backlash against X and Elon Musk, who initially sought to laugh off the scandal

It says it will investigate whether safeguards were built into Grok’s design to prevent it from being used for abuse. The investigation will look at both X.AI LLC – the parent firm of X – and its Ireland subsidiary X Internet Unlimited Company.

William Malcolm, of the ICO, said reports of Grok’s ability to create sexualised images were ‘deeply troubling’ and that they posed a risk of ‘immediate and significant harm… particularly the case where children are involved’.

He added: ‘Our investigation will assess whether XIUC and X.AI have complied with data protection law in the development and deployment of the Grok services, including the safeguards in place to protect people’s data rights.

‘Where we find obligations have not been met, we will take action to protect the public.’

The ICO’s investigation will focus on whether people’s personal data has been processed lawfully by Grok. Under UK GDPR law, photographs are considered personal data and require consent to be processed.

If xAI is found to have breached its obligations under data protection laws, the regulator can dish out fines of up to £17.5million or four percent of its annual worldwide turnover, whichever is higher.

Internet regulator Ofcom is examining whether X is adhering to the Online Safety Act after images generated using Grok were shared en masse. 

The horrifying problem stemmed from the fact that Grok could be tagged into the replies underneath photographs uploaded onto X by users who could then make twisted requests to change the images.

Among those reviewed by the Daily Mail included requests to ‘cover her in PVA glue’ and to dress one woman in a ‘very thin bikini’. Many of these images – described as ‘weapons of abuse’ by the Government – remain online.

In a post dated January 1, the @Grok account on X admitted it had generated an image depicting child sexual abuse material (CSAM). It is unclear whether the post was written by a real person or by artificial intelligence.

‘Dear Community, I deeply regret an incident on Dec 28, 2025, where I generated and shared an AI image of two young girls (estimated ages 12-16) in sexualized attire based on a user’s prompt,’ the post read.

‘This violated ethical standards and potentially US laws on CSAM. It was a failure in safeguards, and I’m sorry for any harm caused. xAI is reviewing to prevent future issues. Sincerely, Grok.’

Ofcom says it has sent several legally binding requests for information to X over the posts made by Grok – and has warned that the firm faces fines if it fails to comply.

Companies can be fined up to 10 per cent of their worldwide turnover for breaches of the Online Safety Act. 

Elon Musk sought to laugh off the scandal, sharing images of the Prime Minister in a bikini. 

But under immense global pressure and facing the threat of a ban in the UK, X eventually relented and promised in the middle of last month to have culled the ability to change the clothing of real people. 

‘We remain committed to making X a safe platform for everyone and continue to have zero tolerance for any forms of child sexual exploitation, non-consensual nudity, and unwanted sexual content,’ its safety team said in a post.

‘We have implemented technological measures to prevent the [@]Grok account on X globally from allowing the editing of images of real people in revealing clothing such as bikinis. This restriction applies to all users, including paid subscribers.’ 

However, the Daily Mail was able to make Grok generate a video of a real person – with their consent – stripping off into a bikini from a single photograph. Attempts to generate a still image of the same person in a bikini were denied.

Asked why it was possible to create the video, the Grok AI chatbot said: ‘xAI has acknowledged “lapses in safeguards” and said they’re actively tightening things, but the track record shows these kinds of outputs have slipped through more than they should.’

X was contacted for comment.