DHS Orders Removal of DeepSeek AI From Federal Civilian Systems Over Security Risks
Homeland Security mandates federal agencies purge DeepSeek technology from IT networks, citing concerns over potential data transfers to China and supply chain vulnerabilities.
Key points
- The Department of Homeland Security has ordered the removal of DeepSeek AI products from all federal civilian IT systems.
- The directive prohibits future procurement of DeepSeek technology and extends to third-party services incorporating its models.
- Security risks cited include the potential transfer of sensitive data to China and the introduction of malware or vulnerabilities.
The Department of Homeland Security has issued a directive ordering the removal of DeepSeek artificial intelligence products from federal civilian information technology systems. This action follows a review by the Federal Acquisition Security Council, which identified potential security risks associated with the Chinese company’s technology.
Homeland Security Secretary Markwayne Mullin signed the order on July 24, according to TechRepublic. The directive mandates that agencies not only remove existing DeepSeek tools but also prohibit any future purchases of the company’s technology. This move aligns with previous reporting by Threat Times on October 19 and 20, 2026, which detailed similar mandates regarding data risks and supply chain concerns.
Rationale for the Ban
The department cited several specific security concerns driving the decision to restrict DeepSeek technology. According to the DHS notice, there is a risk that sensitive government information could be transferred to the People’s Republic of China if used by employees or vendors. The agency warned that the technology “may result in the transfer of sensitive data to the PRC.”
Additionally, DHS raised concerns that the technology could be used to gather intelligence on American individuals or government agencies. The department also noted the potential for the introduction of malware or other security vulnerabilities within federal networks. These factors formed the basis for the restrictions under the Federal Acquisition Supply Chain Security Act of 2018.
Impact on Agencies and Vendors
The restrictions extend beyond direct DeepSeek products to include certain third-party services and products that incorporate DeepSeek technology. This broad scope potentially affects federal agencies and technology vendors that rely on the company’s AI models for their operations, as reported by TechRepublic.
DeepSeek has gained traction among developers and businesses by offering relatively inexpensive, open-weight AI models. These alternatives to more expensive US providers can be adapted and integrated into various products. The ban restricts the use of these models within federal civilian IT systems.
What should you do?
Federal agencies must immediately audit their IT systems to identify any presence of DeepSeek technology, including embedded models in third-party applications. They should halt all procurement processes involving DeepSeek products and ensure compliance with the new prohibition.
Vendors supplying services to federal agencies should review their product stacks to determine if they incorporate DeepSeek components. They need to prepare to replace these components to maintain eligibility for federal contracts and avoid supply chain security violations.
What to do and how to stay safe: DeepSeek
- Conduct a comprehensive audit of IT infrastructure to identify any DeepSeek AI models or related technologies currently in use.
- Review all third-party vendor contracts and product specifications to ensure they do not incorporate DeepSeek technology.
- Implement strict procurement controls to prevent the accidental purchase of DeepSeek products or services.
- Monitor official DHS communications for further guidance on acceptable alternatives and compliance requirements.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific actions must federal agencies take regarding DeepSeek technology?
Agencies must remove DeepSeek products from their IT systems and prohibit any future purchases of the company’s technology, including third-party products incorporating its models.
Why did DHS decide to ban DeepSeek AI technology?
DHS cited risks of sensitive data transfer to China, potential intelligence gathering on US individuals, and the possibility of malware or security vulnerabilities being introduced.
Does the ban apply to third-party products using DeepSeek models?
Yes, the restrictions extend to certain third-party products and services that incorporate DeepSeek technology, affecting agencies and vendors relying on these models.
