South Korea Halts DeepSeek AI Downloads Over Data Privacy Concerns

South Korea has temporarily suspended new downloads of the Chinese AI chatbot DeepSeek, citing data protection violations. The restriction, effective February 15, 2025, at 6:00 p.m. local time, will remain in place until the chatbot's mobile apps comply with national privacy regulations, according to the Personal Information Protection Commission (PIPC). Web access to DeepSeek remains unaffected.

Regulatory Scrutiny and Privacy Violations

Following an investigation launched immediately after DeepSeek's release, PIPC identified issues related to data processing policies and third-party service communications. DeepSeek has since appointed a local representative and acknowledged that it did not fully account for South Korea's privacy laws before launching.

To regain compliance, the company must revise its mobile applications to align with the Personal Information Protection Act (PIPA).

???? PIPC’s Warning to Users:
✔ New app downloads are paused
✔ Existing users should avoid inputting personal data
✔ Final regulatory decisions are pending

The commission also pledged to strengthen oversight and improve regulatory guidance to prevent similar incidents in the future.

Security Risks and National Concerns

The National Intelligence Service (NIS) recently criticized DeepSeek for excessively collecting personal data and using it to train its AI models. Additionally, security researchers have discovered that DeepSeek's Android and iOS apps transmit certain user data unencrypted, posing potential cybersecurity risks.

While Beijing maintains that it allows foreign internet companies to operate in China as long as they comply with local laws, it has denied any involvement in forcing companies to collect data unlawfully.

Global Implications of AI Privacy Regulations

DeepSeek’s suspension highlights a growing global emphasis on AI governance, data privacy, and cybersecurity. South Korea’s move signals stricter enforcement of privacy laws, setting a precedent for how AI-powered services must handle personal data when operating in foreign markets.