\n<\/p>\n
The jury is still out on whether the Chinese AI upstart DeepSeek is a game changer<\/a> or possibly part of an elaborate plan<\/a> by its hedge fund parent company to short Nvidia and other tech stocks. Whichever it might be (maybe both?), DeepSeek and its large language model has made some major waves. Now, it\u2019s catching the eye of data protection watchdogs.\u00a0<\/p>\n In what appears to be the first major move from one such watchdog since DeepSeek went positively viral<\/a> in recent days, Euroconsumers, a coalition of consumer groups in Europe, has with the Italian Data Protection Authority filed a complaint related to how DeepSeek handles personal data in relation to GDPR<\/a>, the data protection regulatory framework in Europe.\u00a0<\/p>\n The Italian DPA confirmed today<\/a> that it subsequently wrote to DeepSeek with a request for information. \u201cA rischio i dati di milioni di persone in Italia,\u201d it notes. (\u201cThe data of millions of Italians is at risk.\u201d) DeepSeek has 20 days to respond.<\/p>\n One key detail about DeepSeek that many noticed is the service is made and operates out of China. Per its privacy policy<\/a>, this includes the information and data that DeepSeek collects and stores, which is also housed in its home country.<\/p>\n DeepSeek also briefly notes in its policy that when it transfers data to China from the country where DeepSeek is being used, it does so \u201cin accordance with the requirements of applicable data protection laws.\u201d\u00a0\u00a0<\/p>\n But Euroconsumers \u2014 the organization that brought a successful case against Grok<\/a> last year over how it used data to train its AI \u2014 and the Italian DPA want more detail.\u00a0<\/p>\n Addressing Hangzhou DeepSeek Artificial Intelligence and Beijing DeepSeek Artificial Intelligence, the Italian DPA said it wants to know what personal data is collected, from which sources, and for which purposes \u2013 including what information is used to train its AI system \u2013 along with what the legal basis is for processing. It also wants more details on those servers in China.\u00a0<\/p>\n Further, it writes in its information request, it wants to know \u201cin the event that personal data is collected through web scraping activities,\u201d how users who are \u201cregistered and those not registered to the service have been or are informed about the processing of their data.\u201d<\/p>\n The news outlet MLex<\/a> notes that Euroconsumers also highlighted that there are no details regarding how DeepSeek protects or restricts minors on its services, from age verification to how it handles minors\u2019 data.<\/p>\n (DeepSeek\u2019s age policy notes that it is not intended for users under the age of 18, although it does not provide a way to enforce that. For those between the ages of 14 and 18, DeepSeek suggests these younger users read through the privacy policy with an adult.)<\/p>\n The consumer groups and the Italian watchdog are the first to make a move against DeepSeek. They might not be the last, although follow-ups may not be as swift.\u00a0<\/p>\n Earlier today, DeepSeek was a prime topic at a press conference at the European Commission. Thomas Regnier, Commission Spokesperson for Tech Sovereignty, was asked whether there are concerns at the European level over DeepSeek related to security, privacy, and censorship. Yet the main message was: it\u2019s too soon to say anything about any investigations.<\/p>\n \u201cThe services offered in Europe will respect our rules,\u201d Regnier noted<\/a>, adding that the AI Act applies to all AI services offered in the region.\u00a0<\/p>\n He declined to say whether DeepSeek, in the EU\u2019s estimation, respected those rules or not. He was then asked whether the app\u2019s censorship on topics that are politically sensitive in China fell afoul of free speech rules in Europe and if that merited an investigation. \u201cThese are very early stages, I\u2019m not talking about an investigation yet,\u201d Regnier said quickly in response<\/a>. \u201cOur framework is solid enough to tackle potential issues if they are here.\u201d<\/p>\n We have contacted DeepSeek regarding the Italian DPA complaint and will update this post as more information becomes available.<\/p>\n<\/div>\n