Austrian Group NOYB Files GDPR Complaint Against X Over AI Data Use

Austrian advocacy group NOYB, led by prominent privacy activist Max Schrems, has filed a significant complaint against the social media platform X, formerly known as Twitter. The complaint accuses the Elon Musk-owned company of unlawfully utilizing users’ personal data to train its artificial intelligence (AI) systems without obtaining proper consent, in violation of the European Union’s strict privacy regulations.

According to Reuters, NOYB’s complaint has been lodged with data protection authorities across nine European Union countries. This coordinated effort is aimed at increasing pressure on Ireland’s Data Protection Commission (DPC), which is the primary regulator for many major U.S. tech companies operating in the EU, including X.

The Irish DPC has reportedly sought an order to prevent X from processing user data for the development and refinement of its AI systems unless proper consent is obtained. In response, X has agreed to temporarily halt the use of EU users’ personal data for AI training until users are given the option to withdraw their consent, an Irish court heard last week. However, the DPC’s complaint against X remains focused on the company’s mitigation measures and its perceived lack of cooperation, rather than directly challenging the legality of the data processing itself.

Read more: X Halts Use of EU Data for AI Training Amid Legal Scrutiny

Max Schrems emphasized the importance of adhering to EU regulations, stating, “We want to ensure that Twitter fully complies with EU law, which — at a bare minimum — requires [companies] to ask users for consent in this case,” per Reuters.

During last week’s court hearing, it was revealed that X had only provided users with the opportunity to object to the data collection several weeks after it had already begun. This delay in seeking consent has raised concerns about the company’s compliance with the EU’s General Data Protection Regulation (GDPR).

The controversy surrounding X’s AI data practices comes on the heels of a similar situation involving Facebook’s parent company, Meta. In June, Meta announced that it would delay the launch of its AI assistant in Europe after being advised by the Irish DPC to do so. NOYB had also filed complaints in several countries regarding Meta’s use of personal data for AI training.

Source: Reuters