South Korea’s data protection authority has raised concerns over the unauthorized transfer of user data by the Chinese artificial intelligence startup, DeepSeek. The country’s Personal Information Protection Commission (PIPC) revealed on Thursday that the AI service, which was available for download in the South Korean app market earlier this year, had transferred user information and prompts to multiple companies in China and the United States without proper consent.
DeepSeek, a relatively new player in the AI sector, had launched its app in South Korea in January. However, according to the PIPC, during the app’s initial months of operation, DeepSeek transferred personal data from South Korean users to external companies without securing explicit consent from the users. This practice raises serious concerns about privacy violations and the potential misuse of personal information, especially when such data was shared with entities across international borders.
The PIPC’s investigation points out that, at the time of its launch, the app did not follow South Korea’s strict data protection regulations, which mandate that companies obtain user consent before transferring any personal information. The commission’s actions were spurred by the discovery that DeepSeek was sharing sensitive user data with companies located in both China and the United States, raising issues around both privacy rights and the security of user data.
In response to these concerns, South Korea’s data agency took swift action, suspending new downloads of the DeepSeek app in February. However, the company behind the app, Hangzhou DeepSeek Artificial Intelligence Co Ltd, has yet to publicly address the allegations or provide a comment regarding the matter.
This incident is likely to further fuel ongoing debates about the handling of personal data in the era of artificial intelligence. South Korea, known for its stringent data protection laws, will likely continue to scrutinize tech companies operating within its borders to ensure compliance with its privacy standards. The case also underscores the need for greater transparency and accountability in how AI companies manage user data globally.
