Italy’s Data Protection Authority has launched an inquiry into Chinese AI company DeepSeek over potential violations of Europe’s GDPR laws. The investigation follows a complaint from Euroconsumers, a European consumer rights group, raising concerns about how DeepSeek collects, stores, and processes user data. The watchdog has requested detailed information on data sources, usage, and compliance with privacy laws. DeepSeek has been given 20 days to respond to the request.
A key concern is that DeepSeek, which operates from China, processes user data within its home country. Its privacy policy states that data transfers comply with relevant laws, but the Italian authorities want more transparency. They have specifically asked how data is collected, whether personal information is used to train AI models, and how non-registered users are informed about data processing. Another issue raised is the lack of clear measures to protect minors, as DeepSeek’s age policy does not enforce verification.
The case against DeepSeek follows a previous legal action against Elon Musk’s AI platform, Grok, over data privacy issues. Consumer groups argue that stricter regulations are needed to protect user data. Meanwhile, the European Commission has acknowledged concerns about DeepSeek but has not yet launched an official investigation. Officials have stated that any AI services operating in Europe must comply with existing laws under the AI Act.
DeepSeek’s rapid rise in the AI industry has drawn significant attention, but its privacy policies are now under scrutiny. The outcome of this investigation could impact how AI companies handle data in Europe. As regulators assess compliance, the case highlights the ongoing global debate over data privacy, security, and AI governance.
