Republic of Korea: Personal Information Protection Commission issued corrective measures regarding DeepSeek’s data processing practices

On 24 April 2025, the Personal Information Protection Commission (PIPC) announced the results of its preliminary investigation into DeepSeek. The PIPC issued corrective recommendations, including the requirement for DeepSeek to ensure legal grounds for transferring personal information overseas, immediately delete any unnecessary transferred data, and enhance transparency by publishing and detailing its privacy policy in Korean. Additionally, the PIPC recommended strengthening AI-related personal information protection measures, improving the overall security of processing systems, and appointing a domestic representative to oversee compliance. If DeepSeek accepts these recommendations within 10 days and it must report on their implementation within 60 days, with the PIPC planning at least two follow-up inspections to ensure compliance.