Italian data protection authority investigates DeepSeek over privacy concerns
Italy's data protection authority launched an investigation into Chinese AI app DeepSeek over concerns that it collects and processes personal data in violation of EU privacy rules, particularly regarding potential storage in China. The app became unavailable in Italian app stores on January 29, 2025, though regulators did not confirm they ordered the removal.
What happened
The Italian data protection authority (Garante) issued a detailed information request to DeepSeek on January 28, 2025, citing elevated risk to personal data of millions of Italians. The authority demanded information about what personal data is collected, data sources, intended uses, legal basis for processing, and whether data is stored on servers in China.
DeepSeek's app became unavailable in Apple and Google app stores in Italy on January 29, 2025. The Garante stated it was uncertain whether the removal was due to the authority's action, but opened an investigation to verify GDPR compliance.
Reported impact
The Garante indicated that DeepSeek represents an elevated risk to the personal data of millions of people in Italy. The authority required a response within 20 days.
Index analysis
European data protection rules prohibit transfer of user data outside the EU without adequate safeguards. The Garante questioned whether DeepSeek had used training data from competitors such as OpenAI in violation of data protection rules.
Governance controls
The European Commission confirmed it initiated verification of DeepSeek to determine compliance with EU AI rules. Ireland's Data Protection Commission also requested information from DeepSeek regarding processing of Irish users' data.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.