Republic of Korea: Personal Information Protection Committee opened investigation into DeepSeek’s data processing practices

On 7 February 2025, the Personal Information Protection Commission (PIPC) announced an investigation into the data processing practices of DeepSeek. The PIPC requested information from DeepSeek regarding the collection and processing of data, including personal information, throughout the development and provision of the service, as well as its compliance with the Personal Information Protection Act. The areas of focus include the entity responsible for processing personal information, the types of data collected, the purposes of collection, and how the data is used, stored, and shared. The PIPC is also reviewing documents and conducting technical analysis of data and traffic in collaboration with specialised institutions. Furthermore, the PIPC is cooperating with personal data regulators in the United Kingdom, France, and Ireland, and coordinating with the Chinese government through diplomatic channels. Finally, PIPC advised caution in the use of DeepSeek and specified that is preparing policy materials to ensure the responsible use of generative AI.