DeepSeek faces South Korean scrutiny over unauthorised data transfers

South Korea’s data protection authority has flagged serious privacy concerns over the operations of Chinese AI startup DeepSeek, accusing the company of transferring personal data and user-generated content abroad without consent. 

The findings come after a months-long investigation into the company’s conduct following its app launch in the South Korean market earlier this year.

According to the Personal Information Protection Commission, DeepSeek, officially registered as Hangzhou DeepSeek Artificial Intelligence Co. Ltd., failed to obtain user permission before transmitting personal information and AI prompt content to companies based in China and the US. 

This activity reportedly occurred during the app’s availability in local app stores in January.

In a particularly troubling revelation, the commission stated that DeepSeek forwarded user prompts, along with device and network information, to Beijing Volcano Engine Technology Co. Ltd. 

The startup later explained this was part of an effort to enhance user experience, but confirmed it stopped the transfer of such data on 10 April.

As a result, the commission has recommended that DeepSeek delete the previously shared content and immediately secure a lawful framework for any future overseas data transfers. 

Responding indirectly, China’s Foreign Ministry stressed that Beijing does not require companies to collect or store data illegally, asserting its stance amid growing international scrutiny over Chinese firms’ data practices. 

Meanwhile, DeepSeek has yet to respond publicly to the commission’s findings.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!