Italy: Data Protection Authority requested DeepSeek to provide information on its data processing practices and whether it stores collected data on servers located in China

On 28 January 2025, the Italian Data Protection Authority (DPA) launched an investigation into DeepSeek's compliance with the General Data Protection Regulation (GDPR) regarding its Artificial Intelligence (AI) chatbot services. The DPA requested information on the personal data collected, its sources, purposes, legal basis, and storage locations, particularly whether data is stored in China. DeepSeek must also explain how its AI system is trained, whether personal data is obtained via web scraping, and how users are informed about data processing. DeepSeek has 20 days to provide the requested information.