DeepSeek Faces Scrutiny from Irish and Italian Data Protection Authorities
There is ongoing debate about whether Chinese AI firm DeepSeek represents a groundbreaking innovation or a strategic move by its hedge fund parent company to impact major tech stocks like Nvidia. Regardless of its true intent, DeepSeek and its AI model have gained significant attention, now drawing the focus of European data privacy regulators.
The Irish Data Protection Commission (DPC) has officially contacted DeepSeek, requesting details on how it processes and manages the personal data of Irish citizens. A spokesperson for the DPC confirmed the request but declined to provide further information.
This request follows swift action from Italy’s data protection authority, which issued a similar inquiry just 24 hours earlier. As of now, DeepSeek has not responded publicly to either regulatory body. However, its mobile application has been removed from the Google Play and Apple App Store in Italy.
Italy’s intervention marks one of the first major regulatory challenges for DeepSeek since it gained viral popularity. Meanwhile, Euroconsumers, a coalition of European consumer rights organizations, has submitted a formal complaint to Italy’s data protection authority, raising concerns about DeepSeek’s data collection and processing practices with the General Data Protection Regulation (GDPR).
As investigations continue, European regulators are increasing their scrutiny of AI companies handling user data, particularly those operating outside the region.
DeepSeek Under Investigation by Italian Data Regulator Over Data Privacy Concerns
Italy’s data protection authority (DPA) has officially reached out to DeepSeek with a request for detailed information regarding its data practices. The regulator emphasized that the personal data of millions of Italian citizens could be at risk, giving DeepSeek 20 days to respond.
A key concern raised is that DeepSeek, which is developed and operated in China, stores user data within its home country. According to its privacy policy, the company transfers collected data to China while claiming compliance with relevant data protection laws.
Consumer rights organization Euroconsumers, which previously took legal action against Grok over AI training data usage, has joined the Italian DPA in demanding more transparency. The regulator specifically seeks details on what personal data is gathered, where it originates, and how it is used—including whether it is employed to train DeepSeek’s AI models. Additionally, authorities want clarity on the legal basis for processing this data and the specifics of its storage on servers in China.
Another major issue flagged by regulators is DeepSeek’s potential use of web scraping to collect personal data. The Italian DPA has requested an explanation of how both registered and non-registered users are informed about their data being processed.
News outlet MLex has also reported that Euroconsumers raised concerns about DeepSeek’s policies regarding minors. The platform lacks clear measures to verify user age or restrict access for underage users, raising privacy and security risks. While DeepSeek states its services are not intended for individuals under 18, it does not implement strict age enforcement.
The Italian watchdog’s investigation is among the first regulatory actions against DeepSeek, but it is unlikely to be the last. During a European Commission press conference, spokesperson Thomas Regnier was asked about potential security, privacy, and censorship concerns related to DeepSeek. However, officials stated it is too early to determine whether further investigations will take place at the EU level.
DeepSeek Faces Regulatory Scrutiny in Europe Over Data Privacy and AI Practices
Regulatory authorities in Europe are closely monitoring DeepSeek’s compliance with data protection and AI regulations. Responding to concerns about privacy and free speech, Thomas Regnier, a spokesperson for the European Commission, stated that AI services operating in Europe must adhere to established legal frameworks, including the AI Act. However, he stopped short of confirming whether DeepSeek currently meets these requirements. When asked whether the platform’s restrictions on politically sensitive topics in China conflict with European free speech standards, Regnier indicated that it was too early to determine if an investigation would be launched.
Similarly, the U.K.’s Information Commissioner’s Office (ICO) acknowledged that DeepSeek, like all generative AI developers, must ensure transparency in data collection and processing. A spokesperson emphasized that AI companies need to provide clear, accessible information on how they handle personal data and enable users to exercise their rights. While the ICO continues to engage with industry stakeholders to promote compliance, it has not yet taken specific action against DeepSeek.
Meanwhile, discussions have emerged regarding DeepSeek’s approach to intellectual property and copyright. Some industry experts have questioned how the company has managed to develop and run a large-scale language model at a significantly lower cost compared to competitors. Microsoft and OpenAI have raised concerns that DeepSeek may have been trained on condensed versions of their proprietary models, potentially raising legal issues related to data usage and intellectual property rights.
DeepSeek has yet to publicly respond to these regulatory concerns. In the meantime, its mobile applications have been removed from major app stores in Italy, though its services remain accessible online. Further updates will follow as new details emerge regarding legal challenges and regulatory actions involving DeepSeek in Europe.
