On 19 October 2026, the US Department of Homeland Security (DHS) made public an order directing federal civilian agencies to remove DeepSeek products and third-party services developed using its AI model from their information systems. The order was signed by Homeland Security Secretary Markwayne Mullin on 24 July 2026, and its restrictions took effect when it was published in the Federal Register on 20 October 2026.
Scope of the Federal Directive
The order covers products and services from DeepSeek, a privately owned artificial intelligence company based in the People’s Republic of China (PRC). It directs civilian agencies to remove covered products and bars them from acquiring new DeepSeek products and services. Agencies covered include the Department of the Treasury, Department of State and Department of Justice. The directive excludes Department of Defense agencies and national security systems from its scope. Agencies may submit written requests for exceptions within 60 days. Each request must establish a mission-critical need or a national interest basis. The removal requirement applies to third-party services developed using DeepSeek’s AI model as well as to DeepSeek’s own products.
Legal Basis and Security Concerns
The order was issued under the Federal Acquisition Supply Chain Security Act of 2018, a US law addressing risks in federal information and communications technology supply chains. DHS cited the possibility that use of DeepSeek products by government employees or vendors could transfer sensitive data to the PRC. It also cited potential malware or other security vulnerabilities in the models.
DeepSeek and China’s Response
DeepSeek gained prominence in January 2025 with the release of its R1 model, which was known for high performance and low operational cost. On 20 October 2026, Chinese Foreign Ministry spokesperson Mao Ning said China would safeguard the legitimate rights and interests of Chinese companies and opposed what it described as an overextension of national security concepts.
Important Facts for Exams
- The Federal Acquisition Supply Chain Security Act was enacted in 2018.
- The Federal Register is the US government’s official journal for federal rules, proposed rules and notices.
- DeepSeek is a privately owned artificial intelligence company based in the People’s Republic of China.
- DeepSeek’s R1 model gained prominence in January 2025.
Federal civilian agencies covered by the directive must remove the specified products and services, subject to the exception process. The order does not apply to Department of Defense agencies or national security systems.
