Live or unresolved
PendingRegulatorUpdated 3 February 2026
Ofcom investigation of X — Grok sexualised imagery
Ofcom (provisional decision, then possible High Court review)
Ofcom opened a formal investigation into whether X assessed and mitigated the risk of Grok-generated sexual deepfakes of real people — including children — spreading on the service, and whether it took them down quickly. On 3 February 2026 Ofcom said it is gathering evidence under binding information notices, working with the ICO, and that standalone chatbot image-creation sits partly outside the Act. No findings and no provisional decision yet.
At stake
Whether X breached UK illegal-content duties on intimate-image abuse and CSEA. Fines, and in the extreme a court-ordered UK block, are the statutory ceiling — none of that has been decided.
Opened 12 January 2026 (formal investigation); first contact 5 January 2026
Ofcom — Investigation into X and scope of the Online Safety ActPendingRegulatorUpdated 3 February 2026
ICO investigation of X and xAI — Grok personal-data processing
Information Commissioner’s Office (UK GDPR / DPA 2018)
The ICO opened formal investigations into X Internet Unlimited Company and X.AI LLC over processing of personal data in Grok and its potential to produce harmful sexualised image and video content. Parallel to Ofcom, not a speech-ranking case. No findings yet.
At stake
UK data-protection consequences for Grok image generation of real people.
Opened 3 February 2026
ICO statement, 3 February 2026Active orderRegulatorUpdated 15 August 2026
Online Safety Act 2023 — illegal-content and child-safety duties
Ofcom (judicial review in the High Court)
The Act is in force. X’s own UK page lists 19 illegal-content categories it geo-restricts and 7 child-harmful categories it restricts from minors. Ofcom can fine up to 10% of qualifying worldwide revenue or apply to court to block a service. There is still no published X-vs-Ofcom merits judgment on a specific takedown notice.
At stake
Statutory, named removal duties inside the UK — appealable by judicial review.
Opened 2023 (Act); illegal-content codes 2025; child-safety 25 July 2025
Online Safety Act 2023 / X UK duties pageActive orderAgency orderUpdated 10 July 2026
Ofcom Category 1 designation of X
Ofcom Register of Categorised Services
Ofcom listed X (X Internet Unlimited Company) as a Category 1 social media service. Category 1 adds duties on user empowerment, identity verification, news-publisher and journalistic content, content of democratic importance, and freedom-of-expression assessments — on top of the illegal-content and child-safety codes already in force. Additional-duties codes were out for consultation when the register landed.
At stake
The extra Category 1 rulebook. Journalism and democratic-importance content get more protection, not less, under those duties.
Decided 10 July 2026 (register published)
Ofcom Register of Categorised Services