DHS orders DeepSeek removed from federal civilian IT systems

The U.S. Department of Homeland Security ordered federal civilian agencies to remove covered DeepSeek products and services from agency information technology systems and exclude them from procurement. The instructions took effect immediately upon the order’s issuance, subject to an exception process.

The order applies to Federal Civilian Executive Branch agencies, except for their national security systems and secure compartmented information systems. It does not prohibit private companies or consumers nationwide from using DeepSeek.

The action reaches beyond products sold under the DeepSeek name. Under the DHS exclusion and removal order, agencies must remove products supplied by DeepSeek or its affiliates, along with third-party products and services developed using DeepSeek implementations.

The procurement requirements are slightly different. Agencies must exclude products and services developed by DeepSeek and affiliated entities. The order says that instruction includes third-party DeepSeek implementations used to provide products or services to civilian agencies. It also directs agencies to remove covered items from approved product lists, service-provider equipment lists and e-commerce marketplaces.

Agencies may seek exceptions, including delayed compliance or relief for particular actions. Requests must be submitted in writing within 60 days of issuance, identify the covered item, provide a compelling justification and describe alternative risk mitigations. The Cybersecurity and Infrastructure Security Agency reviews each request and issues a written approval or denial.

DHS cited the Federal Acquisition Supply Chain Security Act of 2018 and its implementing regulations as authority. The department said the secretary acted after reviewing a Federal Acquisition Security Council recommendation and supporting evidence. DHS said DeepSeek models present multiple threat vectors and could transfer sensitive data to the People’s Republic of China when used by U.S. government employees or vendors. The reviewed sources did not include a response from DeepSeek.

The attached order is numbered 2026-01 and carries an original release date of July 24, 2026. Its notice was filed for public inspection on October 19 and scheduled for publication in the Federal Register on October 20. The public record does not explain the gap between the order’s release date and public filing or establish when each agency received it.