The Key Points:
- Italy blocks DeepSeek: Italian regulators banned the Chinese AI tool over privacy concerns.
- Unsecured databases exposed: DeepSeek left over a million chat records, including user messages, API keys, and internal data, open online.
- Europe investigates: Ireland and Belgium are also probing DeepSeek's data handling.
- China’s data control raises alarms: Critics warn that DeepSeek, like other Chinese tech firms, must comply with Beijing’s surveillance laws.
- DeepSeek’s weak security: The company recently suffered cyberattacks and suspended new user signups.
Italy Takes Action Against DeepSeek
Italy has blocked the Chinese AI tool DeepSeek over serious privacy concerns. The country’s data protection agency, Garante, announced the ban after DeepSeek failed to prove compliance with European data laws.
Regulators say the company, based in Hangzhou and Beijing, did not provide enough information about how it collects and stores personal data.
Authorities demanded whether user data is stored in China and if the company scrapes personal information from the internet. DeepSeek’s responses were deemed “completely insufficient,” prompting Italy to ban the AI tool from operating in the country.
This move is part of a broader European crackdown on data privacy violations, especially involving Chinese tech companies suspected of spying on users.
Over One Million Chat Records Left Exposed
Adding to DeepSeek’s troubles, cybersecurity firm Wiz Research found two exposed databases linked to the AI tool. These unsecured databases contained over one million chat records, stored in plain text and left open to the internet.
The leaked data included:
- User conversations with DeepSeek’s chatbot.
- API keys for authentication.
- Backend details about the company’s internal systems.
- Operational metadata, including sensitive logs.
Shockingly, these databases were accessible without a password, meaning anyone could retrieve private user messages and even extract internal files from DeepSeek’s servers.
DeepSeek quickly shut down the exposed databases after researchers alerted them, but it remains unclear whether hackers had already accessed the data.
European Scrutiny Grows
Italy is not alone in its concerns. Other European nations are also investigating DeepSeek’s questionable data practices.
- Ireland’s Data Protection Commission has contacted DeepSeek for details on how it handles Irish users’ data.
- Belgium’s data regulator launched an investigation following a complaint about DeepSeek’s illegal data transfer.
These actions suggest a growing European pushback against Chinese AI firms that fail to meet strict privacy standards.
DeepSeek’s Ties to Chinese Surveillance
One of the biggest fears surrounding DeepSeek is its connection to the Chinese Communist Party (CCP). As a Chinese tech company, DeepSeek is subject to Beijing’s strict data laws, which require firms to hand over user data to the government upon request.
This raises serious concerns about:
- State surveillance – Chinese intelligence agencies could access any European user data collected by DeepSeek.
- Espionage risks – AI tools like DeepSeek could be used to steal trade secrets or monitor political dissidents.
- Data misuse – User conversations stored in China are outside European legal protection, meaning they could be exploited without consequences.
This is not the first time China’s AI ambitions have been scrutinized. Huawei, TikTok, and other Chinese firms have faced similar accusations of spying for Beijing.
DeepSeek’s Cybersecurity Failures
DeepSeek’s security problems don’t stop at privacy violations. The AI firm was also recently hit by major cyberattacks. Hackers targeted its systems, forcing the company to suspend new user signups for nearly 24 hours.
The exposure of backend details and API keys means attackers could potentially:
- Gain deeper access to DeepSeek’s systems.
- Exploit vulnerabilities to steal even more data.
- Launch larger-scale attacks on organizations using the AI model.
These repeated security failures are alarming for a company handling sensitive user information.
A Warning for the Future
Italy’s ban and Europe’s investigations send a clear message: Chinese AI companies will face tough scrutiny if they fail to protect user data.
DeepSeek’s reckless handling of private information, weak cybersecurity, and ties to the Chinese government make it a serious risk. If European regulators continue their probe, more countries may follow Italy’s lead and block DeepSeek.
With AI tools becoming more powerful, governments must ensure they are not being used as Trojan horses for surveillance. China’s track record of spying, hacking, and suppressing information makes it hard to trust any tech firm operating under its rule.
Europe’s fight against data exploitation is just beginning—DeepSeek might only be the first of many AI tools to face a hard shutdown.
Carl Riedel is an experienced writer and Open Source Intelligence (OSINT) specialist, known for insightful articles that illuminate underreported issues. Passionate about free speech, he expertly transforms public data into compelling narratives, influencing public discourse.