AIToday
Open-Source AISemafor TechPublished: Jul 29, 2026, 22:01 JST

Chinese AI censorship can be removed through distillation, research finds

Chinese AI censorship can be removed through distillation, research finds

3 Key Points

  1. What happened

    Researchers at CTGT, a San Francisco AI lab, built a smaller AI model using outputs from DeepSeek V4 Flash (a Chinese open-source model) as training data through a process called distillation. When asked about sensitive topics like Uyghur detention camps, the original DeepSeek model either refused to answer or gave answers favorable to China, but the distilled model provided evidence-based responses instead.

  2. Why it matters

    The findings undercut a top US government concern that Chinese open-source AI models are a pathway for Chinese political censorship to reach American users. The research suggests that censorship does not automatically transfer to models built from Chinese sources, which could strengthen the case for US companies to use cheaper and faster Chinese open-source models or create customized versions from them rather than build from scratch.

  3. What to watch

    The Trump administration is actively debating how to handle Chinese open-source models; US officials have expressed interest in CTGT's findings. Some officials worry about large-scale use of Chinese models shaping American society toward Beijing's worldview, though concerns about hidden security backdoors in Chinese models have never been established with solid evidence.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

The research emerges amid active debate within the Trump administration over how to regulate Chinese open-source AI models. While US officials have long worried that these models embed political censorship and could serve as propaganda tools—the China Media Project called DeepSeek "a much more sophisticated propaganda tool than we all thought"—CTGT's findings suggest the concern may be overstated. The lab's work shows that when a larger Chinese model is used to train a smaller custom model through distillation, the censorship traits do not necessarily transfer. This distinction matters because it separates the question of whether a model *contains* censorship from whether that censorship *survives* when the model is repurposed by another party. The research also addresses a secondary fear: that Chinese models could contain hidden security backdoors, though the article notes this concern has never been backed by solid evidence. For US companies, the implication is practical—distilling from cheaper Chinese models could be a faster and more cost-effective path than building models from scratch.

FAQ
What is distillation and how does it change a model's responses?
Distillation is a process where a larger model (called the "teacher") generates data used to train a smaller "student" model. CTGT's research showed that when they distilled DeepSeek V4 Flash, the resulting smaller model no longer inherited the original model's censorship—for example, it provided evidence-based answers about Uyghur detention camps instead of refusing to answer or whitewashing the topic.
What was the original concern about Chinese open-source AI models?
US government officials feared that Chinese open-source models are a pathway for Chinese political ideas and censorship to infiltrate the views of American users, and that large-scale adoption could eventually shape American society to align with Beijing's worldview.

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleAI's biggest winners aren't giants—they're scrappy middle-market tech firms