DeepSeek AI Data Faces Scrutiny Amid Microsoft’s Investigation into OpenAI Data Theft

DeepSeek AI, a chatbot service from China that has recently gained popularity on the Apple App Store, is under investigation following allegations of unauthorized data access linked to Microsoft-backed OpenAI. Sources indicate that Liang Wenfeng, the founder of DeepSeek AI, has vehemently denied these claims, labeling them unfounded and suggesting they reflect a coordinated effort by Western media to jeopardize the company’s growth.

Industry analysts have raised concerns that DeepSeek AI may have utilized OpenAI’s proprietary datasets to augment its DeepSeek R1 model, operating on the DeepSeek V3 algorithm framework. There are reports that the company may have acquired substantial data through OpenAI’s Application Programming Interfaces (APIs)—a routine approach for software developers to incorporate AI functionalities into their platforms.

Allegations of Data Misappropriation from OpenAI’s API

Microsoft typically permits licensed developers access to OpenAI’s capabilities via API, facilitating the integration of GPT-based conversational AI into various applications. However, there are apprehensions that DeepSeek AI may have exploited this access to harvest extensive amounts of data from OpenAI’s cloud services, possibly evading restrictions designed to prevent unauthorized data extraction.

Potentially sophisticated evasion techniques might be at play, including data scraping or parallelized request handling, to sidestep detection mechanisms. Although OpenAI has safeguards like token-based authentication and rate limitations, malicious entities could theoretically bypass these defenses by distributing requests across various accounts or cloud proxies.

Microsoft’s Inquiry and EU Privacy Regulations

Microsoft, under the leadership of CEO Satya Nadella, is currently assessing the situation. An anonymous source has indicated that DeepSeek AI may not require external data, as China’s AI infrastructure, especially Baidu’s extensive language models, could sufficiently support its chatbot training.

The European data privacy landscape is also reacting. Italy’s Garante per la Protezione dei Dati Personali (Italian Data Protection Authority) has initiated an investigation to determine whether DeepSeek AI complies with the General Data Protection Regulation (GDPR). This follows formal complaints from Belgium’s data protection authority regarding possible GDPR breaches relating to user data processing.

Furthermore, the European Commission may form a committee to delve deeper into these issues. If found in violation of data privacy laws, DeepSeek AI could face significant penalties or even restrictions on operations within EU jurisdictions, reflecting heightened concerns among privacy-conscious nations like the Netherlands and Denmark.

Competition with Alibaba’s AI Developments

In an already competitive atmosphere, Chinese behemoth Alibaba has declared that its QWEN 2.5 Max model surpasses prominent Western AI technologies, including OpenAI’s ChatGPT and Meta’s LLaMA. Despite Alibaba’s assertions of superior capabilities, both companies remain silent on essential matters concerning data privacy and compliance with emerging Western regulations.

Recent regulatory changes in the West have imposed stringent limitations on AI firms transferring user-generated data to foreign servers, aiming to prevent unauthorized surveillance and enhance cybersecurity. This regulatory landscape has intensified scrutiny on both Chinese firms, urging them to clarify their data governance policies.

Conclusion

As the pace of AI innovation accelerates, the tension between technology companies and regulatory bodies emphasizes the critical need for ethical data practices and transparency. The ongoing claims against DeepSeek AI concerning potential exploitation of OpenAI’s resources highlight broader geopolitical and technological challenges that continue to shape the future of artificial intelligence.

Ad

Join over 500,000 cybersecurity professionals in our LinkedIn group “Information Security Community”!

Source