No Privacy Impact Assessment Was Conducted of Grok Imagine Until After Launch, Finds Canadian Privacy Commissioner

The Office of the Privacy Commissioner of Canada: An investigation by the Privacy Commissioner of Canada has found that Grok’s AI image-generation tool was launched without proper safeguards or sufficient consideration of potential privacy harms. This lack of protections allowed users around the globe to create and share non-consensual, sexualized deepfakes, many targeting women and children. In a report released today, Commissioner Philippe Dufresne found that X Corp. and xAI violated Canada’s federal private-sector privacy law. According to the full report, while a privacy impact assessment was completed of the previous version of Grok’s image generation model, one was not done for Grok Imagine until March, well after its July 2025 launch. Even then, the assessment “did not accurately reflect […] risks to security, safety and privacy”. Grok is now owned by SpaceX, which is going public tomorrow in extraordinary fashion. It is still generating abusive imagery. ⌥ Permalink