Published by Global Banking & Finance Review®
Posted on July 15, 2025
2 min readLast updated: January 22, 2026
Add as preferred source on GoogleElon Musk's X faces EU complaints over using sensitive user data for targeted ads, potentially violating the Digital Services Act.
By Foo Yun Chee
BRUSSELS (Reuters) -Elon Musk's X social media platform has been hit by complaints by nine civil society organisations to EU and French regulators over what they say is its use of users' data for targeted advertising that may breach EU tech rules.
The organisations - AI Forensics, the Centre for Democracy and Technology Europe, Entropy, European Digital Rights, Gesellschaft für Freiheitsrechte e.V. (GFF), Global Witness, Panoptykon Foundation, Stichting Bits of Freedom and VoxPublic said they took their complaint to the European Commission and the French media regulator Arcom on Monday.
They urged both regulators to take action under the Digital Services Act (DSA) which prohibits advertising based on sensitive user data such as religion, race and sexuality.
X, the Commission and Arcom did not immediately respond to emailed requests for comment.
"We express our deep concern regarding the use by X of users' sensitive personal data for targeted advertisements," the organisations said in a statement.
They said their concerns were triggered after they looked into X's Ad Repository which is a publicly available database set up by companies as part of a DSA requirement.
"We found that major brands as well as public and financial institutions engaged in targeted online advertising based on what appear to be special categories of personal data, protected by Article 9 of the GDPR, such as political opinions, sexual orientation, religious beliefs and health conditions," they said.
The group called on the regulators to investigate X. GDPR refers to the EU data privacy law.
(Reporting by Foo Yun CheeEditing by Alexandra Hudson)
The organisations expressed deep concern regarding X's use of users' sensitive personal data for targeted advertisements.
They urged regulators to take action under the Digital Services Act, which prohibits advertising based on sensitive user data.
The concerns were triggered after the organisations examined X's Ad Repository, which revealed targeted advertising based on sensitive personal data.
The General Data Protection Regulation (GDPR) is referenced as the EU data privacy law concerning user data.
Nine civil society organisations filed complaints against X to EU and French regulators.
Explore more articles in the Headlines category
