The PIPC Announces Status Examination Results of DeepSeek Service
The Personal Information Protection Commission (PIPC) of Korea announced the status examination results regarding the DeepSeek AI service. The examination identified issues such as insufficient privacy policy transparency, lack of proper consent for cross-border data transfers, and absence of age verification procedures for children. Consequently, the PIPC issued specific recommendations for correction and improvement to ensure DeepSeek complies with the Personal Information Protection Act (PIPA).
Summary and content fields are drawn from the document text and are pending editorial review.
Who issued it
Who it governs
This press release is for AI developers, foreign service operators, and the general public interested in AI regulatory compliance under Korea's Personal Information Protection Act.
What the document contains
The document covers the PIPC's regulatory examination of DeepSeek's data practices, including its privacy policy deficiencies, cross-border data transfers, usage of user inputs for AI training, and children's privacy safeguards. It details specific findings from technical analyses and outlines corrective recommendations and administrative actions required by Korean law.
It does not contain binding judicial fines or criminal penalties, focusing instead on administrative recommendations for correction and improvement.
- The PIPC conducted a status examination on DeepSeek following privacy and data security concerns regarding its R1 LLM chatbot.
- DeepSeek was found to have insufficient privacy policy transparency, including lacking Korean translations and failing to detail data destruction procedures upon its initial launch.
- The company transferred user data internationally without separate prior consent and transferred user inputs to Beijing Volcano Engine Technology Co., Ltd.
- DeepSeek agreed to implement opt-out features for AI training data and established an age verification process during the examination.
- The PIPC issued formal recommendations for correction and improvement, requiring DeepSeek to report its implementation results within 60 days.
· Developments in Response to DeepSeek · 1. Privacy Policy · 2. Cross-border Transfer of Personal Data · 3. User Input for AI Model Development and Training · 4. Age Verification and Other Safeguards for Children · Administrative Disposition and Future Plans
How it scores
Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.
Accountability
4/5Clear responsibility for AI outcomes
DeepSeek is required to inform the PIPC of its implementation results within 60 days. The PIPC will monitor DeepSeek’s implementation status at least twice
Administrative Disposition and Future Plans
screening score · 2026-10-23
Human Dignity
0/5Respect for the inherent worth of persons
screening score · 2026-10-23
Human Oversight
0/5Humans remain in control of consequential decisions
screening score · 2026-10-23
Transparency
4/5Openness about how AI systems work and are used
enhancing transparency in providing services - Recommendation for improvement: Implementing stronger safeguards recommended by the PIPC
The PIPC Announces Status Examination Results of DeepSeek Service
screening score · 2026-10-23
Enforcement
4/5Consequences and compliance mechanisms with real force
The PIPC decided to issue recommendations for correction on DeepSeek to enhance transparency in providing services on an ongoing basis
Administrative Disposition and Future Plans
screening score · 2026-10-23