Skip to content
Submit incident
AII-1002-63539
AllegedThe record is a lawsuit, complaint or accusation that has not been decided.

DeepSeek faces privacy violation complaints in Europe

Consumer protection organizations in Belgium and Italy filed complaints with their data protection authorities alleging that DeepSeek's privacy practices violate EU data protection law, particularly regarding transfers of personal data to China and inadequate transparency about data use for AI training.

28 January 2025 · DeepSeek · Privacy and surveillance
28 January 2025
AII-1002-635392 sources ↓
Quick facts
Category
Privacy and surveillance
Country
Belgium
Source
DHnet
Date
28 January 2025
Drafted by
Raidu Incident Detection

What happened

Testachats filed a complaint with Belgium's data protection authority on 29 January 2025 against DeepSeek, alleging that the chatbot's privacy policy reveals multiple violations of data protection rights including inadequate data transfers, profiling, and minor protection.

Testachats stated that DeepSeek transfers personal data of Belgian users to China without appropriate safeguards, and that Chinese law allows state access to data without transparency or proportionality guarantees.

On 28 January 2025, Altroconsumo filed a separate complaint with Italy's data protection authority raising questions about DeepSeek's collection and use of personal data. The Italian authority gave Hangzhou DeepSeek Artificial Intelligence and Beijing DeepSeek Artificial Intelligence 20 days to respond.

Reported impact

Testachats identified multiple violations of EU and national data protection regulations in DeepSeek's privacy policy, including its collection of email addresses and user interactions.

Index analysis

The complaints centre on whether DeepSeek complies with GDPR requirements regarding data transfers, the legal basis for processing, data storage location, and transparency about how user data is used to train its AI system.

Governance controls

Belgium's data protection authority was asked to impose a temporary restriction on DeepSeek's processing of personal data of Belgian users. Italy's data protection authority sought clarification on what personal data is collected, its sources, purposes, legal basis, and storage locations.

Classification

Category
Privacy and surveillance
Industry
Digital security
Country
Belgium
Harm status
Potential harm
Intent
Unknown
Timing
Post-deployment
Harm types
Human or fundamental rights
Harmed
Consumers, General public
Consequences
Regulatory investigation
AI systems
DeepSeek
Regulations
GDPR (cited)

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DHnet
Testachats dépose plainte contre DeepSeek auprès de l'Autorité de protection des données
29 January 2025
RTBF
DeepSeek, l'IA chinoise fait l'objet de deux plaintes déposées en Europe, dont l'une en Belgique
29 January 2025
Mar 2026DeepSeek ClickHouse database exposed without authenticationConfirmedPrivacy and surveillancewiz.ioFeb 2026AI Systems Generate Real WeChat IDs, Leading to Unsolicited ContactWell documentedPrivacy and surveillanceguancha.cn扬子网(扬子晚报)China NewsJan 2026Malicious Chrome Extensions Stole AI Chat Data from 900,000 UsersConfirmedPrivacy and surveillancewinfuture.deIT BOLTWISE® x Artificial IntelligenceNov 2025South Korea's National Intelligence Service reports DeepSeek collects excessive user dataConfirmedPrivacy and surveillanceعصر ايران،سايت تحليلي خبري ايرانيان سراسر جهان www.asriran.comilna.irJun 2025German Data Protection Authority Seeks DeepSeek App Removal for Illegal Data Transfers to ChinaConfirmedPrivacy and surveillancede.marketscreener.comtagesschau.de