South Korea flags DeepSeek for unauthorized data transfers

South Korea's Personal Information Protection Commission found DeepSeek, a Chinese AI startup, guilty of sending user data and AI prompt content without consent, Reuters reported.

During its first launch in January, the company allegedly transferred personal information to companies in China and the United States, including Beijing Volcano Engine Technology Co. Ltd., without user consent.

The commission uncovered DeepSeek also shared device, network, and app information, which violated local data protection standards. Although the company later stated that the transfers were designed to improve the user experience, it discontinued sharing prompt content on April 10, according to Reuters.

As a result, the agency issued an appropriate recommendation, directing DeepSeek to remove previously exported AI prompt data and provide a legal framework for future cross-border data transfers.