Italy: Data Protection Authority investigation into DeepSeek's data processing practices compliance with GDPR

Progress

Current status

under investigation

30 Jan 2025 under investigation

28 Jan 2025 under deliberation

Scope

Implementers

Italy

Policy Area

Data governance

Policy Instrument

Data protection regulation

Regulated Economic Activity

ML and AI development

Government Branch

executive

Government Body

data protection authority

Implementation Level

national

Timeline of events

30 Jan 2025

under investigation

Data Protection Authority ordered an immediate limitation on processing of data of Italian users by DeepSeek and opened investigation into company's data processing practices

On 30 January 2025, the Italian Data Protection Authority (DPA) ordered an immediate limitation on the processing of data of Italian users by DeepSeek. The order follows the communication from the company regarding the information on the personal da…

Source

Event type investigation

Action type interim ruling

Government branch executive

Government body data protection authority

28 Jan 2025

under deliberation

Data Protection Authority requested DeepSeek to provide information on its data processing practices and whether it stores collected data on servers located in China

On 28 January 2025, the Italian Data Protection Authority (DPA) launched an investigation into DeepSeek's compliance with the General Data Protection Regulation (GDPR) regarding its Artificial Intelligence (AI) chatbot services. The DPA requested in…

Source

Event type investigation

Action type announcement