Multiple governments ban DeepSeek on official devices over security risks
Multiple governments and organizations have banned or restricted the use of DeepSeek AI chatbot on official devices, citing national security and data privacy concerns. Over one million unprotected user records were found exposed in a publicly accessible database, and the service collects extensive user data stored on servers in China.
What happened
On 29 January 2025, security company Wiz Research discovered a publicly accessible database containing over one million unprotected records from DeepSeek, including system information, chat logs, and API authentication credentials.
Australia's Department of Home Affairs issued a mandatory directive on 4 February 2025 requiring all government agencies to cease use and installation of DeepSeek products, applications, and web services and remove all existing DeepSeek products from government systems and devices.
Taiwan's Digital Development Department issued a warning on 31 January 2025 recommending government agencies and critical infrastructure limit DeepSeek use, followed by a blanket prohibition order from the Prime Minister's office on 3 February 2025.
Reported impact
DeepSeek collects extensive user data including text, voice, files, chat histories, IP addresses, device identifiers, cookies, device model, operating system, keystroke patterns and timing, and system language, which are stored on servers in China.
Index analysis
Italy's Data Protection Authority initiated an investigation on 29 January 2025, immediately blocking DeepSeek and suspending its availability on Apple Store and Google Play pending clarification of what user information is collected and stored.
Data protection authorities in France and South Korea and governments in the United Kingdom, Germany, Netherlands, Ireland, Japan, and India have launched or announced reviews of DeepSeek's data security and privacy risks.
The United States Navy prohibited personnel from using DeepSeek in any form for work or personal use; NASA banned all employee use; the Defense Information Systems Agency blocked the website; Texas became the first state to formally ban DeepSeek on government devices; and the House of Representatives Chief Administrative Officer notified congressional offices that DeepSeek has not been authorized for use.
Governance controls
DeepSeek states that its collection of user personal information may be stored on servers outside the user's country of residence and specifies: 'We store this information on secure servers in China.'
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.