AI Law - International Review of Artificial Intelligence LawCC BY-NC-SA Commercial Licence
G. Giappichelli Editore

16/02/2025 - GDPR and AI: Italy’s Garante Stops DeepSeek Over Data Protection Issues (Italy)

argument: Notizie/News - Personal Data Protection Law

Source: ItaliaOggi

The ItaliaOggi article reports that the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) has ordered a ban on DeepSeek AI, citing serious privacy concerns. The decision highlights growing regulatory scrutiny over AI compliance with GDPR and data protection laws in Europe.

According to the regulator, DeepSeek AI failed to provide adequate transparency regarding its data collection and processing methods. Authorities found that the AI model used personal data without explicit consent, violating fundamental GDPR principles, including user rights to information and control over their data.

The investigation revealed that DeepSeek AI scraped online data, potentially including sensitive information, without sufficient legal grounds. The Garante argued that such practices pose a risk to individuals' privacy and could lead to misuse of personal information.

Italy's ruling follows a broader trend in the European Union, where regulators are increasingly enforcing strict AI data governance rules. Similar actions have been taken against other AI models, including ChatGPT, raising questions about AI developers' responsibilities under GDPR.

Legal experts suggest that AI companies operating in Europe must adopt stronger compliance measures, such as implementing clear consent mechanisms, ensuring transparency in AI decision-making, and offering users greater control over their data.

The article concludes by discussing potential penalties for DeepSeek AI and the broader implications of Italy’s decision for AI governance and regulatory compliance across the EU.