DeepSeek Transfers South Korean User Data to ByteDance: Regulator Reports

Synopsis
Key Takeaways
- DeepSeek's data transmission to ByteDance confirmed
- Temporary suspension of DeepSeek in South Korea
- PIPC seeking clarification on data practices
- Explicit consent needed for data sharing
- DeepSeek acknowledges compliance issues
Seoul, Feb 18 (NationPress) South Korea's data protection regulator has verified that the DeepSeek chatbot, created by a China-based AI startup, transmitted user data from the country to a third party, specifically to ByteDance, the Chinese owner of TikTok, as reported by officials on Tuesday.
This confirmation was made a day after the Personal Information Protection Commission (PIPC) announced a temporary halt on new downloads of DeepSeek in South Korea due to concerns regarding its data collection practices.
"We have confirmed that DeepSeek has been in communication with ByteDance," stated a PIPC official, according to Yonhap news agency.
However, the official noted that the PIPC has "not yet confirmed the specific data that was transferred and the extent of this transfer."
This marks the first instance where the regulator confirmed potential user data leaks by DeepSeek to external parties.
According to South Korean laws, explicit consent is mandatory from users if their personal information is shared with third parties.
The PIPC also issued a formal request for information to DeepSeek to clarify its data collection and management processes.
In reply, DeepSeek has appointed a representative in South Korea and has acknowledged its lapses in adhering to local protection laws, while also expressing its intention to actively cooperate with the commission.
The government announced on Monday that it has temporarily halted the local operation of the Chinese AI app DeepSeek due to worries about its data collection practices.
The PIPC stated that the service was suspended at 6 p.m. Saturday and will be reinstated after necessary "improvements and remedies" are implemented in accordance with South Korea's personal information protection laws.
This decision follows multiple government ministries and agencies restricting internal access to the AI service due to concerns regarding the startup's data management practices.
The commission had sent a formal inquiry to DeepSeek last month requesting clarification regarding the service's data collection and management policies.
DeepSeek has since designated a representative in South Korea and recognized its shortcomings in complying with local protection regulations while also expressing a commitment to collaborate with the commission.