The European Commission has launched a new formal investigation into X under the Digital Services Act (DSA). At the same time, the Commission has extended its ongoing investigation, opened in December 2023, into X’s compliance with its recommender systems risk management obligations.

The new investigation will examine whether X properly assessed and mitigated risks linked to the deployment of Grok functionalities on its platform in the EU. These risks include the dissemination of illegal content, such as manipulated sexually explicit images and content that could constitute child sexual abuse material, which have reportedly exposed EU users to serious harm.

The Commission will focus on whether X has:

• Thoroughly assessed and mitigated systemic risks, including illegal content, gender-based violence, and serious negative impacts on physical or mental well-being;

• Conducted and submitted an ad hoc risk assessment report on Grok functionalities prior to deployment.

The extension of the December 2023 proceedings will also investigate whether X properly assessed and mitigated all systemic risks linked to its recommender systems, including its recent switch to a Grok-based system. If X is found to have failed, this could constitute infringements of Articles 34(1) and (2), 35(1), and 42(2) of the DSA.

The Commission is working closely with Coimisiún na Meán, the Irish Digital Services Coordinator, who will participate in the investigation as X’s national coordinator in the EU.

Next steps: The Commission will continue gathering evidence, including requests for information, interviews, or inspections, and may impose interim measures if X does not adjust its service. The proceedings allow the Commission to adopt a non-compliance decision or accept commitments from X to remedy the issues.

The investigation also temporarily relieves national Digital Services Coordinators from supervising or enforcing the DSA in relation to these suspected infringements.