The Italian Data Protection Authority, known as Garante, has imposed a significant block on DeepSeek AI, preventing the processing of personal data belonging to Italian citizens. This decision comes in response to concerns regarding the Chinese AI model’s assertion that it does not comply with European Union laws, a claim that Garante deemed unsatisfactory in its findings.
On January 31, Garante initiated an investigation into Hangzhou DeepSeek Artificial Intelligence and Beijing DeepSeek Artificial Intelligence, granting the companies a 20-day period to provide detailed information about their compliance with the General Data Protection Regulation (GDPR). Specifically, the inquiry will focus on the nature of data collection, its purpose, storage measures, and whether it had been utilized to train the AI model.
This blockade means that DeepSeek AI will no longer be available for download on app stores within Italy. However, users could potentially circumvent this restriction through virtual private networks (VPNs), highlighting the challenges of enforcing such digital barriers.
The situation at DeepSeek reverberates with the past actions taken against other AI models. In April 2023, the Italian Garante similarly banned OpenAI’s ChatGPT due to privacy violations, culminating in a hefty €15 million fine. This history of stringent regulatory measures suggests a growing trend in the scrutiny of AI technologies within the European market.
The legal ambiguity surrounding DeepSeek, particularly the absence of a physical presence in any EU member state, allows the other 26 member nations to file complaints against the company and initiate their investigations. Following Italy’s lead, both Belgian and Irish data protection authorities have opened probes, seeking clarity on the processing and storage of data pertaining to their citizens. Furthermore, the Portuguese and Spanish data protection authorities are reportedly monitoring the situation, while France’s CNIL announced plans to examine DeepSeek’s operational practices.
As investigations unfold, it is anticipated that more European countries may take similar actions against DeepSeek, emphasizing the region’s deepening commitment to enforcing data protection standards, especially through the GDPR framework. The scrutiny faced by DeepSeek AI represents not just a localized issue in Italy, but a potentially expansive concern that resonates throughout the European Union as the balancing act between innovation and privacy continues to evolve.