South Korea’s data protection authority has accused Chinese artificial intelligence startup DeepSeek of transferring user data and AI prompts without consent, a violation of the country’s privacy laws. The Personal Information Protection Commission (PIPC) made the announcement in a statement released on Thursday.
According to the PIPC, Hangzhou DeepSeek Artificial Intelligence Co. Ltd. failed to obtain user permission before sending personal data to several companies based in China and the United States. This reportedly occurred during DeepSeek’s launch in South Korea in January, when the app was still available for download in the country’s app market.
In February, South Korea’s data agency halted new downloads of the DeepSeek app after the company admitted to overlooking some of the agency’s rules on personal data protection. Subsequent investigations revealed that the company had also transferred AI prompt content—entered by users—to Beijing Volcano Engine Technology Co. Ltd., along with associated device, network, and app data.
DeepSeek later informed the agency that the data was sent to Volcano Engine to enhance user experience. The company stated it had stopped the transfer of AI prompt content as of April 10.
In response, the PIPC has issued a corrective recommendation. DeepSeek is now required to delete any AI prompt content that had been transferred to Volcano Engine and must establish a lawful framework for transferring user data internationally.
DeepSeek has not yet responded to requests for comment regarding the allegations.
This incident highlights growing concerns about data privacy and international transfers of personal information, particularly in the fast-evolving world of AI technologies.
Melissa Enoch
Follow us on:
