The Office of the Privacy Commissioner of Canada determined that X and xAI generated sexualized deepfakes without consent, violating PIPEDA
Canadian privacy investigation into X and xAI Grok sexualized deepfakes
The Office of the Privacy Commissioner of Canada (OPC) initiated two investigations under section 11(2) of PIPEDA against X Corp. and xAI on January 15, 2026, determining that the two companies did not obtain valid consent for collecting, using, and disclosing personal information to generate sexualized deepfakes, and that a reasonable person would not consider the practice appropriate, violating section 5(3) of PIPEDA and Principle 4.3. The OPC noted that from late December 2025 to early January 2026, multiple media outlets reported that Grok generated and publicly disclosed millions of sexualized deepfake images of real identifiable individuals, including CSAM and NCII; X Corp. stated that as of March 6, 2026, it had removed 126 pieces of related content in response to Canadian user reports, while xAI said it could not provide similar breakdown data for Standalone Grok.
加拿大隐私专员公署对 Grok 生成性化深度伪造的调查结论与整改要求，呈现了监管机构对生成式图像工具的合规判定路径。