Key Takeaways
- The Department of Homeland Security has ordered federal civilian agencies to remove DeepSeek products from their systems and stop buying them.
- The order dates to July 2026. It was filed publicly on October 19 and published in the Federal Register on October 20.
- The removal rule also reaches third-party products and services built using DeepSeek technology.
- DHS says DeepSeek’s models present “multiple threat vectors,” including a risk that sensitive data could reach Chinese authorities.
- Earlier restrictions covered specific agencies or devices. This order applies across the civilian government.
- China’s foreign and commerce ministries criticized the move and promised to defend Chinese companies.
- The order covers what civilian agencies buy and run. It does not restrict private use.
The DeepSeek ban is a new federal order that changes how civilian agencies handle one of China’s best-known AI developers. The Department of Homeland Security told agencies to remove DeepSeek products from their systems and to stop buying them. The order dates to July 2026 and became public in October, according to the Federal Register notice.
A Chinese Startup That Keeps Landing on Washington’s Radar
DeepSeek is a Chinese AI startup based in Hangzhou. It ranks among China’s best-known AI companies. Its open-source models are widely available in countries including the United States.
Washington’s interest in the company is not new. U.S. agencies began limiting its use in early 2025. The new order extends that pattern across the civilian government.
The order named the company’s developer, which is behind the R1 and V3 models. It also arrived as DeepSeek released a newer model called V4.1-Flash-1017.
What the DeepSeek Ban Tells Agencies to Do
The order does two things. It excludes technology products and services developed by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and its affiliates from civilian agency purchases. It also requires agencies to remove DeepSeek and affiliate products from their information technology systems, according to the notice.
The removal requirement reaches third-party products and services built using DeepSeek technology. That detail matters because many software tools run on top of outside AI models. Security analysts have said the wording raises questions about software provenance and supply chain compliance.
The order applies to federal civilian executive branch agencies. Examples include the Environmental Protection Agency and the Federal Communications Commission. It covers what those agencies buy and run. It does not restrict private citizens or companies.
The notice does not define the phrase “DeepSeek implementations”.That leaves open how agencies and vendors will judge which tools count as built on DeepSeek.
A 2018 Supply Chain Law Does the Heavy Lifting
DHS issued the order under the Federal Acquisition Supply Chain Security Act of 2018. The law lets the government bar risky technology from federal systems. The Secretary of Homeland Security acted after reviewing a recommendation from the Federal Acquisition Security Council and related evidence.
The law uses two tools. An exclusion order limits what agencies can buy. A removal order requires agencies to pull covered products out of their systems.
CISA explains that compliance with these orders is mandatory for civilian agencies. Agencies also have reporting duties, as described in CISA’s guidance on supply chain orders.
DHS filed the notice for public inspection on October 19, 2026. It appeared in the Federal Register the next day. The order itself dates to July, about three months passed before the public saw it.
The Risks DHS Is Worried About
The published notice is short. Most of the detail sits in the signed order, which is posted on Regulations.gov under docket DHS-2026-0628. DHS said DeepSeek’s models present “multiple threat vectors” for government systems.
The department pointed to the way some DeepSeek apps process prompts and responses. That process could send sensitive data to China if government employees or vendors used the tools.. DHS also warned that the models could collect personal information and might fingerprint users. The order cites possible malware and other security flaws.
A separate government evaluation points in a similar direction. In September 2025, the National Institute of Standards and Technology tested three DeepSeek models against four U.S. models. It found the DeepSeek models lagged behind in performance, cost, security and adoption.
It also reported that they were far more susceptible to jailbreaking attacks. The models echoed more misleading narratives tied to the Chinese Communist Party as well.
That evaluation is a separate document from the DHS order. It gives useful background on why U.S. officials have scrutinized the company’s models.
Agencies Were Already Blocking It in Pieces
Federal agencies had already restricted DeepSeek in narrower ways. In January 2025, the Navy barred personnel from using DeepSeek technology. The Defense Information Systems Agency also blocked the DeepSeek website on Pentagon networks. Commerce Department bureaus later told staff that DeepSeek was banned on official government devices.
Those earlier steps covered specific agencies or devices. The new order applies across civilian agencies. It also adds a purchasing ban and reaches third-party tools.
How China Answered
China pushed back the day the order was published. Foreign Ministry spokesperson Mao Ning told reporters that China opposes stretching the concept of national security. She also criticized the politicizing of technology and trade issues. She said Beijing will protect the lawful rights of Chinese companies.
China’s Commerce Ministry went further. It said China will monitor the situation closely and take necessary measures to defend its interests. It also said the United States was trying to suppress China.
Reports also noted that the two countries have agreed to launch AI talks and set up a channel for handling AI incidents. So far, no specific Chinese countermeasures have been reported. The statements signal a firm position without detailing next steps.
Who Has to Act, and Who Can Relax
Federal contractors have the most to check. Because the order reaches products built with DeepSeek technology, vendors that sell software to civilian agencies may need to confirm which AI models power their tools. The notice lists a CISA implementation team for questions about the order, reachable at fascsa.orders@cisa.dhs.gov. Vendors should read the signed order itself rather than rely on summaries.
Everyday users face no new legal restriction from this order. People who use DeepSeek apps still face the same privacy questions that apply to any online service. Reading the data policy of any AI tool is a sensible habit. Avoiding sensitive details in prompts is another.
Final Thoughts
The DeepSeek ban has a narrow audience. It applies only to federal civilian agencies. Its reach is wide because it extends to products built on DeepSeek technology.
Several questions remain open. Agencies must put the removal into practice. Analysts want clearer guidance on how far the third-party language extends. Beijing’s promised response has not yet taken a specific form in available reports.
Three things are worth watching in the coming weeks. The first is any guidance from CISA on how agencies should carry out the removal. The second is how vendors respond to the third-party language. The third is whether Beijing follows its statements with concrete measures.
The main takeaway is simple. The order rests on a documented legal process and a published notice. Readers who want to check its scope can read the notice directly in the Federal Register and the signed order on Regulations.gov.
Discover how AI is reshaping technology, business, and healthcare—without the hype.
Visit InfluenceOfAI.com for easy-to-understand insights, expert analysis, and real-world applications of artificial intelligence. From the latest tools to emerging trends, we help you navigate the AI landscape with clarity and confidence
