DHS orders civilian agencies to remove DeepSeek products from federal IT
The order reaches beyond DeepSeek’s own products to third-party services built using its implementations, widening compliance work for agencies and federal technology suppliers.
The Lead
The Department of Homeland Security has ordered federal civilian agencies to exclude DeepSeek products from procurement and remove covered technology from their IT systems, under an order dated July 24 and published in the Federal Register on October 20. (public-inspection.federalregister.gov)
Key Facts
- The order applies to federal civilian executive branch agencies, excluding national-security and sensitive compartmented information systems.
- Covered products are excluded from civilian procurement and must be removed from agency IT systems.
- Agencies may seek written exceptions; DHS said it will review the order within one year and annually afterward. (public-inspection.federalregister.gov)
Article Body
The order requires agencies to remove products supplied by DeepSeek or its affiliates, along with third-party products and services developed using DeepSeek implementations. Procurement channels, including approved-product lists and electronic marketplaces, must also exclude covered offerings.
DHS attributed the action to supply-chain and data-security risks. The department said DeepSeek-hosted services may collect identifying information and transmit sensitive data to servers in China, and cited research concerning vulnerabilities in the company’s mobile application. Those are the government’s stated risk findings, not an independently established account of how federal systems were affected. (public-inspection.federalregister.gov)
The public record does not state how many agencies or vendors were using covered technology, or how many removals had occurred before publication. Agencies were told to remove products immediately after issuance or request an exception within 60 days. The next consequential question is whether DHS applies the order narrowly to hosted services or broadly to tools incorporating DeepSeek’s open models. (public-inspection.federalregister.gov)
What to Watch
The key signal is how agencies interpret “DeepSeek implementations,” language that potentially captures software supplied by third parties rather than only products sold directly by the Chinese AI developer.