South Korea: DeepSeek transferred user data without consent
South Korea's Personal Information Protection Commission found that DeepSeek transferred personal data and user commands from Korean users to companies in China and the United States without obtaining consent. The regulator suspended the application's downloads in February 2025 after DeepSeek failed to comply with data protection rules.
What happened
South Korea's Personal Information Protection Commission stated on 24 April 2025 that Hangzhou DeepSeek Artificial Intelligence Co Ltd transferred personal information and user commands without obtaining user consent when the service became available in South Korea in January 2025.
The Commission found that DeepSeek sent user-inputted AI commands and content to Beijing Volcano Engine Technology Co. Ltd., along with device, network, and application information, without user permission.
Reported impact
DeepSeek transferred personal information from South Korean users to companies in China and the United States without consent.
Index analysis
In February 2025, South Korea's data protection authority suspended new downloads of the DeepSeek application in the country after DeepSeek acknowledged failing to comply with the authority's personal data protection rules.
Governance controls
The Personal Information Protection Commission found that DeepSeek did not obtain user consent before transferring personal information to third parties.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.