DeepSeek AI Data Handling Triggers International Regulatory Probes
Multiple governments launched investigations into DeepSeek's data practices following concerns about personal data collection and storage. Italy blocked the AI application pending clarification on data sources, while France, Ireland, South Korea and Australia initiated inquiries into the company's privacy safeguards.
What happened
Italy's data protection authority (Garante) demanded that DeepSeek provide detailed information on the sources of personal data collection within 20 days, citing concerns about risks to the data of millions of Italians.
Italy immediately blocked users from accessing the DeepSeek application pending clarification of its data practices. Within 24 hours, Irish and French authorities also requested explanations from DeepSeek on how it handles personal data of citizens. South Korea similarly demanded clarification on DeepSeek's use of personal data, while Australia's budget minister cautioned users about the service.
Reported impact
The organization Euroconsumers filed a complaint with Italian authorities citing violations of the General Data Protection Regulation (GDPR). Authorities expressed concern that personal data may be stored on servers in China.
Index analysis
The U.S. Department of Commerce launched a separate investigation into the types of computer chips used by DeepSeek, seeking to determine whether the company obtained U.S.-manufactured chips prohibited for export to China. DeepSeek stated it relied on Nvidia's H800 model, whose export was legal until 2023, though U.S. authorities reportedly investigated whether DeepSeek acquired advanced Nvidia chips through third parties in Singapore to circumvent American restrictions.
Governance controls
DeepSeek's data handling practices reportedly differ significantly from those of OpenAI and likely conflict with European GDPR requirements.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.