Written in January 2025, the week DeepSeek’s release put Chinese-made AI models under sudden public scrutiny. The specific news cycle has passed, but the legal mechanism described here has not changed, and the question it raises, about the jurisdiction a model answers to, is more relevant today than it was then.
Itwerx is a service-disabled veteran-owned managed IT and cybersecurity provider serving Seattle-area businesses, founded in 2005, and part of that work is helping clients evaluate the vendors and models behind the tools they adopt.
What the law actually says
The commentary that followed DeepSeek’s release repeated a familiar claim: that Chinese law compels any Chinese company to hand data to the state on request. That claim traces to a real statute, the PRC’s National Intelligence Law, passed in 2017 and amended in 2018 – but the common framing overstates what it says.
- Article 7 requires organizations and citizens to “support, assist, and cooperate with” national intelligence efforts, but qualifies that requirement “in accordance with law.”
- Article 14 lets intelligence institutions request that organizations and citizens provide “necessary support, assistance, and cooperation.”
- Article 28, the statute’s only penalty provision on this point, punishes obstructing intelligence work. It does not create a penalty for simply failing to assist.
Read plainly, that is meaningfully narrower than “companies must hand over data on demand, no questions asked.” The obligation is real. The unlimited, automatic compulsion that gets inferred from it is contested, and it is worth understanding why before repeating either version as settled fact.
Two readings, and which one actually matters
Legal scholars disagree about how far this goes. One reading holds that the provision was probably never meant to require active data collection from private companies, pointing to the missing enforcement mechanism for non-cooperation as evidence the law is narrower than its reputation. A stronger and more troubling reading argues that the reassuring version depends on protections – an independent judiciary able to push back on an intelligence request, for instance – that do not exist in that system.
That second reading is the one worth taking seriously, and it is not the argument people usually make. The risk is not primarily what Article 7 says on paper. It is that there is nothing in the surrounding system positioned to refuse a request if one is made. “It is literally the law there” is half right: the obligation to assist is literally in the statute. The idea that it operates as unlimited, unchecked compulsion is the contested half, and the reason it is contested is not comforting either.
What a buyer should actually check
None of this is unique to one country’s law, but it is a useful concrete case for a question every buyer of a foreign-hosted model should be asking generally:
- Separate “runs locally” from “calls home.” An open-source model you can run entirely on your own hardware is a different risk than one whose client software is open source but whose useful features depend on an API call to infrastructure you do not control.
- Trace where the API call actually lands, not where the company is headquartered or where its marketing is written. A model can be developed anywhere and hosted somewhere else entirely.
- For sensitive or regulated data, prefer a model you host yourself, or a vendor whose jurisdiction and legal exposure you have actually checked rather than assumed from the country on its splash page.
The DeepSeek news cycle will keep moving. The question of which jurisdiction your data answers to when it leaves your building does not go away when the headlines do.
Itwerx Corp is a service-disabled veteran-owned small business providing IT services across Seattle, Bellevue, Everett and Snohomish County. This is the kind of thing our cybersecurity work deals with – talk to us about yours.
