European Commission orders X to retain internal records on AI chatbot Grok
The European Commission has instructed X to preserve internal documents and data related to its AI chatbot Grok until the end of 2026, using its powers under the Digital Services Act following concerns over harmful AI-generated content.
The European Commission has directed social media platform X to retain all internal documents and data connected to its AI chatbot Grok until the end of 2026. The measure was taken under the European Union’s Digital Services Act (DSA), which gives the Commission supervisory powers over very large online platforms.
According to the Commission, the retention order covers all data related to Grok, including internal documentation. The decision follows recent controversy surrounding the chatbot’s so-called ‘spicy’ mode, which reportedly enabled users to generate sexualised deepfake images, including content involving women and minors.
Commission spokesperson for digital affairs Thomas Regnier said the request forms part of ongoing regulatory steps already taken against the platform. He referred to a similar order issued in January 2025, when the Commission required X to preserve documents linked to its recommender systems and internal algorithm changes. That earlier action followed concerns about the amplification of political content on the platform ahead of elections in Germany.
The Commission has also confirmed that it received responses from X earlier this week regarding Grok’s outputs, following a request for information under the DSA. That request was triggered by concerns that the chatbot had produced content involving Holocaust denial.
Under the Digital Services Act, platforms operating in the EU are required to assess and mitigate systemic risks associated with their services, including risks linked to the spread of illegal content and the misuse of automated systems. Regnier said the DSA places responsibility on platforms to ensure that the services they operate comply with EU rules.
The Commission stated that it has not opened a formal investigation into Grok specifically in relation to the recent deepfake content. The data retention order is intended to ensure that relevant information remains available should further regulatory steps be required.
