South Korea Orders Chinese AI App DeepSeek to Delete Mishandled User Data

South Korea’s Personal Information Protection Commission (PIPC) has taken action against Chinese AI company DeepSeek, following revelations that the app transferred users’ personal data abroad without consent.

According to the commission, DeepSeek shared sensitive user information—including AI prompts, device specifications, and network details—with companies based in China and the U.S., most notably Beijing Volcano Engine Technology Co. Ltd., a subsidiary of TikTok’s parent company, ByteDance.

The data transfers occurred during the app’s South Korean launch in January 2025, sparking immediate concerns over privacy violations. As a result, the commission suspended new downloads of the app in February, citing violations of South Korea’s strict personal data laws.

The PIPC has now ordered DeepSeek to delete all user data it had previously transferred and to overhaul its data handling policies to align with South Korea’s strict privacy laws.

The commission emphasized the need for DeepSeek to establish a lawful framework for any future cross-border data transfers. In response, DeepSeek confirmed it had ceased sharing AI prompt data as of April 10 and has since appointed a legal representative in South Korea to manage compliance issues.

This case marks the first time South Korea has publicly disclosed the outcome of a privacy investigation involving a Chinese generative AI platform, signaling the country’s firm stance on protecting user data.