X's Erosion of User Privacy Controls Post-Acquisition

According to reports, X's September 2023 privacy policy update enabled the company to share user data with unspecified 'business partners' and use public posts for AI training with no opt-out mechanism initially provided. When an opt-out was eventually added, it was buried in settings under a non-obvious menu path. X reportedly began sharing data with third-party AI companies and abandoned Twitter's previous commitment to not sell user data. The platform's reduced privacy team raised concerns among former employees that compliance with GDPR and other privacy regulations had become inadequate, with the Irish DPC confirming it had opened multiple investigations.

twitter-x has been the subject of increasing scrutiny over its consent manipulation practices. Privacy researchers and regulatory bodies across multiple jurisdictions have documented concerns about how the company handles user data, particularly regarding consent, transparency, and data minimization principles. The findings suggest a pattern of prioritizing business metrics over user privacy, a trend observed across the broader technology industry. Users affected by these practices have limited recourse without proactive intervention such as filing formal complaints with data protection authorities or submitting DSAR requests.

Regulatory responses have varied significantly. European data protection authorities have been more aggressive in enforcement under GDPR, while US enforcement remains fragmented across state-level privacy laws. The investigation highlights the need for stronger federal privacy legislation and more transparent corporate data practices. Affected users should consider reviewing their privacy settings, submitting data deletion requests, and exploring privacy-preserving alternatives recommended by independent researchers.