AI Risk Wire

Cases › produced harmful content › LR-2026-0429

Spain to investigate social media firms over AI-generated child sexual abuse material

Preliminary Why: 1 report: The Guardian · subject to change · 1 independent report

Developing: a major or severe case captured in the last 72 hours. Later changes are logged on the corrections page.

Status: no action reported

Severity major
Reported 17 Feb 2026
Industry social media

No source states: loss or records, developer and model, agent tool, could do, deployer.

Severity major: Test: a regulator involved. Ireland's Data Protection Commission announced a large-scale inquiry into the Grok functionality.

Spain's government said it would ask prosecutors to investigate X, Meta and TikTok to determine whether they committed criminal offences by allegedly allowing their AI to generate and disseminate child sexual abuse material. The cabinet acted on an expert report on deepfakes and manipulated real images. Ireland's Data Protection Commission opened a large-scale inquiry into the generative AI functionality of Grok, after users allegedly prompted the Grok account to generate sexualised images of real people, including children. Meta said it removed such content when it was found, and TikTok said such material was categorically prohibited. The sources do not describe how the material was detected or what has been decided, and the allegations are unproven.

What happened

No source tells the story step by step yet.

What was done

No source states an action or fix.

Risks

Sorted by rule from the case's fields; not yet read from the sources.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Model

Marking machine-made output · Abuse monitoring and account enforcement · Content safety classifiers

Application

People told they are dealing with AI

Infrastructure / target

Phishing and fraud filters

Evidence

No source states: a step-by-step account, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.

Show every field, with its source and grade

What happened

Earliest source we hold
2026-02-17
D inferred by us from the described behaviour, reason shown
What went wrong
produced harmful content
D inferred by us from the described behaviour, reason shown

Impact

Severity
major
D inferred by us from the described behaviour, reason shown
Why this severity
Test: a regulator involved. Ireland's Data Protection Commission announced a large-scale inquiry into the Grok functionality.
D inferred by us from the described behaviour, reason shown

Context

Industry
social media
C one secondary source states it
Country
Spain
C one secondary source states it

Notes on gaps

No source says whether the system was an autonomous agent, so agent fields and failure classes were left out.

LR-2026-0429 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON