ICO

The ICO is the UK Information Commissioner's Office, the independent regulator that enforces the UK's data protection law, including the UK GDPR and the Data Protection Act 2018. It has issued guidance on AI and data protection, including principles for fairness, transparency, and accountability in automated decision-making, and it can fine organisations for breaches. For companies deploying AI systems that process personal data in the UK, ICO guidance sets the practical standard for how they must document data use, explain automated decisions to individuals, and conduct impact assessments.

1 item

EnforcementUK2026-10-10

ICO Opens Formal Grok Investigation Into Data Processing and Harmful Synthetic Images

The UK Information Commissioner's Office has opened formal investigations into X Internet Unlimited Company and X.AI LLC. The probe covers how Grok processes personal data and its capacity to generate harmful sexualized synthetic images and videos. Enterprise teams should treat the case as an enforcement signal for any AI system capable of generating synthetic media involving real people.

ICO Grok xAI synthetic media privacy enforcement GDPR deepfakes UK