DeepSeek, the Chinese artificial intelligence company, has seemingly taken the tech world by storm since its launch, becoming the most downloaded app on Apple's App Store less than two weeks ago. Yet, its rapid ascent has already prompted growing concerns both domestically and internationally about user data safety and the potential misuse of information collected by the app.
According to sources familiar with the matter, the U.S. Commerce Department has initiated investigations to determine whether DeepSeek has illegally imported chips banned from being shipped to China. The app, which launched its free assistant service this January, astonished many by rivaling established names like ChatGPT. This development wiped approximately $1 trillion off U.S. technology stocks, indicating just how significant DeepSeek's disruption has been.
DeepSeek is accused of using Nvidia's H800 chips within its operations, which may have been legally purchased, but the scrutiny remains over whether other semiconductor chips have been secured via illegal means. Organized smuggling operations have reportedly elevated concerns for regulators. Compounding the tension, Nvidia disclosed its position, stating it ensures its partners comply with export laws, yet investigations continue.
What amplifies the urgency surrounding DeepSeek is the nature of the data it collects. Reports indicate the application may gather extensive data on its users, including chat and search histories, device information, and even fingerprint-like keystroke patterns. Angela Zhang, a law professor from the University of Southern California commented, "Data security concerns are always acritical issue when using AI chatbots, and this is not unique to DeepSeek.”
European regulators, most prominently from Italy, have reacted quickly to these concerns, leading to the app being blocked from Apple and Google stores pending investigations. The Italian government is probing the data collection policies, raising eyebrows over potential violations of user rights under stringent EU privacy laws.
Similarly, South Korea's Personal Information Protection Commission (PIPC) plans to send inquiries to DeepSeek, particularly focusing on how the startup utilizes personal data for AI training. A PIPC official acknowledged, "Depending on the response, we will take steps such as fact-finding review or investigation if necessary." The combination of privacy worries and regulatory scrutiny is making it increasingly tough for DeepSeek to navigate the waters of international business.
The concern centers around the stored data across Chinese servers. Critics assert this creates vulnerabilities, as there is no public reporting indicating whether Chinese officials have accessed data via DeepSeek, yet the prospect prompts unease. Samm Sacks, who studies Chinese cybersecurity at Yale, described the potential risks succinctly: "Data, if misused, can yield insights which might be leveraged for blackmail or creating targeted disinformation campaigns.”
DeepSeek described its data collection practices, claiming like many others, to streamline user experience—but the details suggest serious risks. User data, as stated by their terms of service, is sent back to servers positioned within China, leading many to draw parallels with the controversy surrounding TikTok's operations.
Despite the concerns, there remains no legislative framework within the U.S. protecting consumer data as stringent as the European Union's General Data Protection Regulation (GDPR). Current concerns, as Sacks mentioned, reflect broader systemic issues. "We can ban TikTok. We can raise the red flag of data security concerns for DeepSeek, but we don't have a more comprehensive way to make sure companies aren’t collecting more data than they should.”
So, what precautions are privacy experts recommending users take if they choose to interact with the DeepSeek app? Suggestions include avoiding account creation through primary emails to limit tracking and opting for virtual private networks (VPNs) to mask their online activity. With encryption and anonymity becoming increasingly significant to maintaining privacy, many see these as rudimentary steps users could implement.
Interestingly, DeepSeek's open-source nature allows developers to inspect the chatbot's code, setting it apart from similar products. Maintaining transparency can, theoretically, serve as a check within its system. Despite this, the concern remains: what happens to user data once it is transferred back to China?
Notably, there have already been instances where DeepSeek hesitated to address sensitive political matters. Reports emerged detailing incidents of censorship, as seen when DeepSeek refrained from discussing topics such as Taiwan’s territorial status. This raises questions about the integrity of information delivered via the app and, by extension, its reliability.
The worldwide tech community waits to see how regulators will proceed with their inquiries and whether stringent regulations will be introduced to govern AI apps effectively. Efforts to safeguard digital data remain imperative, particularly as more users flock to platforms like DeepSeek, which may harbor both advanced features and significant privacy risks.