Data Protection Watchdogs Target DeepSeek: 'Millions of Italians at Risk'

The Irish and Italian data protection authorities have sent requests for information to Chinese AI startup DeepSeek, raising concerns about the safety of users' data. The Italian Data Protection Authority (DPA) has warned that "the data of millions of Italians is at risk," highlighting the seriousness of the situation.

DeepSeek, which has gained significant popularity with its AI chatbot, has been under scrutiny for its data handling practices. The company's privacy policy states that it stores user data in servers located in China, raising concerns about data protection and security. The Irish Data Protection Commission (DPC) has also written to DeepSeek, seeking details on how it processes the data of Irish citizens.

The primary concern is the potential for data breaches and unauthorized access to user information. China, where DeepSeek is based, is one of the most cyber crime-prone countries in the world, ranking third behind Russia and Ukraine in a 2024 study. This increases the risk of data being accessed by nefarious actors, even if DeepSeek maintains robust security measures.

Another concern is the potential for government surveillance or interference, as the Chinese government has broad powers to access data stored within the country. This raises questions about the privacy and security of user data, especially in light of DeepSeek's censorship of politically sensitive topics.

DeepSeek's privacy policy also lacks transparency regarding how it protects or restricts minors on its services, from age verification to how it handles minors' data. This lack of transparency can further erode user trust, especially among parents and guardians who may be concerned about their children's online safety.

In conclusion, the data protection concerns raised by Ireland and Italy have significant implications for DeepSeek's global perception and adoption. The company must address these concerns and adapt its practices to comply with international data protection standards, such as the EU's GDPR. Failure to do so could result in reputational damage, regulatory scrutiny, and a decline in user trust. As DeepSeek continues to expand its user base, it must prioritize data protection and security to maintain user trust and comply with relevant regulations.