In 2023, a new player in the artificial intelligence market, Chinese company DeepSeek, made a remarkable debut, quickly earning recognition for its performance and innovative approach to AI. Within a short time, the company established itself as a viable alternative to Western giants like OpenAI, offering solutions that rival the industry’s best while standing out for their openness and low costs. However, cybersecurity experts are raising concerns about how the platform processes user data.
The rapid growth of DeepSeek is evident. Its mobile application topped the App Store charts within just 48 hours of its launch, reflecting an unprecedented scale of user adoption. While its open-source AI model marks a breakthrough in the affordable implementation of AI, the application presents significant privacy and security challenges, especially for businesses.
Data Privacy and Storage Practices
One of the most alarming aspects of DeepSeek’s operations is how it collects and stores user data. According to its privacy policy, all user interactions—including prompts, uploaded files, chat histories, voice data, images, and even keystroke patterns—are transmitted to external servers and stored by DeepSeek. Moreover, the company reserves the right to review all content submitted by users.
“DeepSeek’s data collection practices go far beyond the standard user information typically gathered by other platforms. What’s particularly concerning is the lack of precise mechanisms to safeguard personal data, which could lead to serious privacy violations,” warns Wojciech Głażewski, Country Manager for Check Point Software Technologies in Poland.
Legal and Reputational Risks
These practices pose significant risks, particularly for organizations required to comply with stringent data protection regulations such as GDPR, HIPAA, or CCPA. Violations of these laws could result in severe legal and reputational consequences for businesses using DeepSeek’s solutions without fully understanding what data is being collected and how it is used.
Censorship and Content Control
Equally troubling is the issue of censorship and content control within the DeepSeek platform. Experts have observed that the platform not only collects vast amounts of data but also imposes restrictions on content. This raises broader ethical concerns about the platform’s management and its potential impact on freedom of speech and business activities.
“We should be concerned. We’ve repeatedly seen how Beijing leverages its technological dominance for surveillance, control, and coercion, both domestically and internationally,” said Ross Burley, co-founder of the Centre for Information Resilience, as quoted by The Guardian. Burley emphasizes that if DeepSeek is not properly regulated, it could lead to dangerous outcomes, such as the spread of disinformation, erosion of public trust, and reinforcement of authoritarian narratives that threaten democratic values worldwide.
A Double-Edged Sword for Businesses
Experts caution that without robust security measures, organizations risk exposing their sensitive data to potential threats. While DeepSeek offers advanced technology, it poses serious challenges for companies that prioritize information security and regulatory compliance.
Despite its technological advancements and affordability, DeepSeek serves as a stark reminder of the trade-offs between innovation and security. Organizations must weigh these considerations carefully before adopting solutions from platforms like DeepSeek.
Source: CEO
