DHS orders all US federal civilian agencies to remove DeepSeek products
Including third-party services built on its models, and bars future purchases
Confirmed
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- 3 of 5
- Last verified
- 19 October 2026
Your AI and this story
- GPT-6 Astra172 days after its cutoff
- Claude Opus 5.5111 days after its cutoff
- Gemini 4 Argon202 days after its cutoff
- Grok 4.7141 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 111 days before it.
Key facts
- Scope: removal of DeepSeek products already in use and exclusion from future procurement; Decrypt and others report it also covers third-party services built on DeepSeek’s models (CyberScoop says the order does not spell out how hosted versions are treated)
- Legal basis (CyberScoop): Federal Acquisition Supply Chain Security Act, after a Federal Acquisition Security Council review; notice slated for the Federal Register on Tuesday Oct 20
- Signer: Homeland Security Secretary Markwayne Mullin; CyberScoop reports the exclusion letter is dated June 26, so the ban may have applied for months before it was published
- Rationale quoted: DeepSeek’s models present ‘multiple threat vectors’; data stored in China, collection of personal information and ‘digital fingerprints’, prompt processing that ‘may result in the transfer of sensitive data to the PRC’, and possible ‘actionable intelligence on U.S. persons’
- Exceptions: agencies may request one 60 days in advance with a ‘compelling justification’ such as a mission-critical function; during removal they are told to monitor network traffic, enhance logging and flag anomalies (CyberScoop)
- Earlier steps: a July DHS memo, released with the order, told agencies to monitor traffic to and from government websites for DeepSeek-related risks; Commerce and the Navy had already banned DeepSeek on government devices, as had New York, Tennessee and Virginia (Decrypt)
- DeepSeek is the only Chinese AI developer named; CyberScoop notes some of the stated concerns could apply to other models, including US ones
What happened
DHS released an order excluding DeepSeek from federal civilian IT. Agencies must strip DeepSeek products from their systems and may not buy them again without an approved exception. The order rests on a supply-chain security law rather than a new AI rule, and the Federal Register notice was due on Oct 20. The WSJ broke the story (paywalled); details here come from CyberScoop and Decrypt.
Why it matters
It is the broadest US federal measure against a Chinese AI developer so far, covering every civilian agency rather than single departments. It lands the same day as reports that DeepSeek’s cheap V4.1 Flash model was apparently driving a large criminal agent campaign (see the NorForge entry), though DHS’s stated reasons are data transfer and intelligence risks, not misuse.
Sources
3 sources from 3 sites. Numbers match the chips in the text.
3 sources: 3 press
Press
Changes
- Filed