DeepSeek AI poses national security and privacy risks, Congress warns

US congressional findings reveal that DeepSeek, ostensibly just another AI chatbot, represents a significant national security concern due to extensive data collection and ties to China. The special committee’s recent report documents alarming privacy violations, security vulnerabilities, and potential intelligence gathering capabilities that extend far beyond typical AI applications, raising urgent questions about international AI regulation and data security.

The big picture: A US Congress special committee has labeled Chinese AI tool DeepSeek a “profound threat” to national security after discovering privacy violations, tracking tools, and connections to the Chinese military.

• The findings come amid growing international scrutiny of DeepSeek, with several countries launching investigations or implementing outright bans since its January release.
• The report explicitly states that DeepSeek “siphons data back to the People’s Republic of China” and “creates security vulnerabilities for its users.”

Key privacy concerns: DeepSeek collects extensive user data including chat histories, device details, and even typing patterns, all of which flows back to China through questionable infrastructure.

• Investigators identified hardcoded links in DeepSeek’s web login page directly connecting to China Mobile, a telecom company allegedly linked to the Chinese Army.
• The committee noted that while “the extent of data transmission remains unconfirmed,” the integration with China Mobile infrastructure raises serious concerns about foreign access to Americans’ private information.

Security vulnerabilities: The chatbot incorporates tracking tools from Chinese tech giants previously flagged by the US government as security risks.

• These tracking technologies come from companies including ByteDance (TikTok’s parent company), Baidu, and Tencent, which the report describes as “a well-documented apparatus of surveillance, censorship, and data exploitation.”
• Researchers discovered DeepSeek inadequately protects the information it collects, effectively creating “a direct channel for foreign intelligence gathering on Americans’ private data.”

Additional allegations: Beyond data collection issues, DeepSeek faces accusations of spreading Chinese propaganda and engaging in unauthorized technology usage.

• The committee raised concerns about censorship, unauthorized usage of US AI models, and unlawful usage of restricted Nvidia chips.
• In response to these findings, the committee has recommended expanding export controls and developing strategies to address risks from Chinese AI models.