An investigation by the Office of the Privacy Commissioner of Canada found X Corp. and xAI violated the country's federal private-sector privacy law by launching the Grok AI-powered image generation tool — which at one point allowed users to create and share more than 6,000 sexualized deepfake images per hour — without appropriate safeguards. In announcing the findings of the OPC's investigation into Grok, Privacy Commissioner Philippe Dufresne also called for stronger federal legislation and enforcement powers. While the OPC investigation cites statistics — including that Grok shared 1.8 million sexualized images since 29 Dec. 2025 and the Center for Countering Digital Hate's estimation that Grok generated approximately 3 million sexualized deepfakes, including 23,000 images of children, between 29 Dec. 2025 and 8 Jan. 2026 — Dufresne said the OPC lacks abilities to effectively enforce the violation of Canada's Personal Information Protection and Electronic Documents Act. "This investigation demonstrates why Canada needs modernized federal privacy laws that will better support the development of trustworthy, privacy-protective technologies," Dufresne said. Since the OPC's investigation began in January, Dufresne said X Corp. and xAI have implemented safeguards to reduce the risk of Grok's use to produce sexualized deepfakes, including a process for "anticipating...