Listen to the Deep Dive of this post
DeepSeek AI: National Security Concerns and Data Privacy Risks
DeepSeek, a new AI tool, has sparked concerns regarding potential national security risks and data privacy. Experts have discovered code within DeepSeek that could enable user data to be sent directly to the Chinese government.
Key Concerns
- Hidden Code: Cybersecurity experts have found intentionally hidden programming in DeepSeek’s code that can send user data to CMPassport.com, the online registry for China Mobile.
- China Mobile Connection: China Mobile, a telecommunications company owned and operated by the Chinese government, was banned from operating in the U.S. in 2019 due to national security concerns.
- Data Collection: DeepSeek’s privacy policy states that it collects various data types, including chat and search query history, keystroke patterns, IP addresses, and activity from other apps.
- User Tracking: DeepSeek’s web tool can create a digital “fingerprint” for each user, potentially tracking their activity across the web.
- Legal Jurisdiction: DeepSeek’s terms of service specify that they “shall be governed by the laws of the People’s Republic of China”.
Expert Opinions
- Ivan Tsarynny, CEO of Feroot Security, stated that there are direct links in DeepSeek to servers and companies in China under the control of the Chinese government.
- John Cohen, a former acting Undersecretary for Intelligence and Analysis for the Department of Homeland Security, called DeepSeek a blatant example of suspected surveillance by the Chinese government.
- Rep. Josh Gottheimer suggested banning DeepSeek from all government devices immediately and informing the public.
- Rep. Raja Krishnamoorthi expressed concern about the possibility of covert collection of DeepSeek user data by the Chinese government.
Risk Assessment
National security officials suspect that technology sold by Chinese-based companies may have backdoors that make data accessible to the Chinese government. The discovery of a potential backdoor in DeepSeek has heightened these concerns. Users may unknowingly be creating accounts in China when registering or logging in to DeepSeek, making their identities, search queries, and online behavior visible to Chinese state systems.