CNPD, the data protection supervising authority in Luxembourg, has added to the debate over the DeepSeek Gen AI model and tool.
You can read their comments at https://cnpd.public.lu/en/actualites/national/2025/02/deepseek.html (thankfully in English without using Gen AI to translate!) and their specific advice about DeepSeek, but they have some other general guidance which applies to all Gen AI, and we hope forms a part of your Gen AI policy or statement:
- When using the online interface, never enter personal or confidential data, as this could be used without adequate safeguards.
- Actively raise awareness among employees (professional sphere) and Internet users (personal sphere) of the risks associated with the use of AI.
- Favour AI tools that comply with the European regulatory framework (RGPD, AI Act), respect data protection principles and offer clear guarantees in terms of security and respect for privacy.