In a decisive move concerning data security, Germany’s data protection commissioner, Meike Kamp, announced that Apple and Google have been formally requested to remove the DeepSeek AI chatbot app from their mobile app stores within Germany. DeepSeek, developed by Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co. Ltd., faces allegations of illegally transferring user data to China, raising concerns about its compliance with European data protection standards.
This action rests on the requirements set by the European General Data Protection Regulation (GDPR), particularly Article 46, which governs the transfer of personal data outside of the EU. No legally binding safeguards were reportedly established by DeepSeek to protect user data to an equivalent standard as that under GDPR rules. Consequently, unauthorized transfers to a nation such as China—a country that has not been afforded an adequacy decision by the EU—breach these regulations.
DeepSeek’s privacy policy indicates comprehensive data collection, including personal information like device identifiers and IP addresses. Moreover, this data is stored and processed within China, a significant concern given the stipulations of the National Intelligence Law 2017, which could compel organizations to cooperate with government data requests.
This regulatory action follows a prior instance in January 2025, where Italy’s data protection authority, Garante, similarly ordered DeepSeek to restrict its operations for non-compliance with privacy protocols. Apple and Google are now tasked with reviewing this request to decide on the app’s future availability in Germany.
The ongoing scrutiny of DeepSeek underscores the increasing vigilance of European regulators over data privacy, particularly in apps with cross-border data transfers to countries with differing privacy regimes. Legal professionals and corporate entities should closely monitor developments in this case, as decisions could signal broader implications for the handling of data privacy by non-EU tech companies operating within Europe.