UK, EU question X over use of data to train Grok AI, IT Security News, ET CISO
Elon Musk-owned X recently enabled by default a setting that allows the social media platform to utilise user data to train its AI model, Grok. This means X can use user posts, interactions, and outputs from Grok for training and refining its AI, requiring users to manually opt-out. Now the regulators in the UK and the European Union (EU) have reportedly connected with the company over its alleged attempt to gain user consent for data harvesting without their approval.
While X claims this data is essential for improving user experience, privacy concerns have been raised. The setting states that users “allow your posts as well as your interactions, inputs and results with Grok to be used for training and fine-tuning”.
Users have expressed difficulty in disabling this feature as the option is currently hidden within the web app’s settings and unavailable on the mobile app.
Also Read: Here how you can opt out from allowing X to access your posts for training Grok chatbot.
How X’s auto-consent flouts tech rules in the UK, EU
The move contradicts the tech laws in both the regions as the regulations prohibit pre-ticked consent boxes. Tech companies are not allowed to use “pre-ticked boxes” or “any other method of default consent”.
Data protection authorities in the UK and Ireland have expressed their concerns over X’s actions, as per a report by the Guardian. The UK’s Information Commissioner’s Office (ICO) is investigating the matter, emphasising the importance of transparency and user choice in data usage.
“Platforms seeking to use their users’ data to train their AI foundation models must be transparent about their activities,” said a spokesperson for the ICO.
“They should take steps to proactively notify users well in advance of using data for these purposes, and provide people with ample time and simple processes to object to having their data used in this way,” the spokesperson added.
Similarly, Ireland’s Data Protection Commission (DPC), the lead regulator for X in the EU, has expressed surprise at the development and is seeking further information from the company.
“The DPC has been engaging with X on this matter for a number of months, with our latest interaction occurring as recently as yesterday, therefore we are surprised by today’s developments. We have followed up with X today (July 26) and are awaiting a response. We expect further engagement early next week,” said Graham Doyle, a DPC deputy commissioner.