Latest / Media, elections and online safety
Korea’s privacy regulator finds DeepSeek sent prompts to ByteDance’s Volcano Engine
See how this story connectsOn 24 April 2025 South Korea’s Personal Information Protection Commission said DeepSeek had sent device, network and app data and users’ AI prompts to servers of Volcano Engine, a Beijing cloud platform owned by ByteDance, without user consent. The commission said that at launch DeepSeek had also passed personal data to companies in China and the United States without disclosing it in its privacy policy. New downloads stayed suspended pending the review.
Why it matters
The finding gave Korean users and other regulators a documented case of a Chinese chatbot moving prompt data abroad without consent.
- When
- 24 Apr 2025
- ID
WTA-N-2025-0100- Where
- South Korea, China
- Who
- Personal Information Protection Commission (South Korea), DeepSeek, ByteDance
- Topics
- Privacy, National security
- Authority
- Personal Information Protection Commission (South Korea)
- Target
- DeepSeek
- Action
- finding: data sent without consent
- Status
- closed · Enforcement ledger
Summary by wheresthe.ai, from South China Morning Post and the reporting credited above. We could not open the primary document, so it is marked Reported. Checked against the source on 9 Oct 2026.
Source copy: download the page text as saved on 18 Oct 2026 (PDF). Also held by the Internet Archive.
Cite this story
WTA-N-2025-0100: “Korea’s privacy regulator finds DeepSeek sent prompts to ByteDance’s Volcano Engine.” wheresthe.ai, 24 Apr 2025. https://wheresthe.ai/d/kr-pipc-deepseek-data-transfer-finding-2025-04/ (source: South China Morning Post).
Spotted an error? Email [email protected].