The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
South Korea’s Personal Information Protection Commission ordered a temporary block on downloads of Chinese AI chatbot DeepSeek, citing privacy concerns after researchers uncovered user data being sent to servers in China. The move aligns with Italy and France’s restrictions and will remain until DeepSeek implements legally required data-handling reforms.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (DeepSeek app with generative AI capabilities) whose use has directly led to significant privacy and security risks, including unauthorized data collection and transmission to foreign servers, vulnerabilities exploitable for attacks, and potential government access to personal data. These factors constitute violations of privacy rights and risks to security, fitting the definition of harm under AI Incident (c) violations of human rights or breach of obligations protecting fundamental rights. The app's removal and regulatory actions confirm the harm is recognized and materialized, not merely potential. Therefore, this is classified as an AI Incident.[AI generated]