Article 303: DHS Orders DeepSeek Ripped Out of Federal Civilian Systems - and Bans Buying Anything Built on It

The Department of Homeland Security published a notice on Monday requiring federal civilian agencies to remove DeepSeek-related technology from their IT systems and barring future procurement of DeepSeek products and services. The order was originally issued on 24 July; October was when it became public. It applies to Treasury, State, Justice and other civilian agencies but excludes the Department of Defense, which has its own rules.

The scope is the part worth reading closely. The prohibition covers third-party products and services developed using DeepSeek's technology, which turns a model ban into a supply-chain audit. DHS cited "multiple threat vectors": potential transfer of sensitive data to the PRC if used by employees or vendors, the possibility of producing "actionable intelligence on US persons and/or government agencies", and malware or vulnerabilities in the models themselves, pointing to open-source research finding critical flaws in DeepSeek's iOS app. A companion July memo told agencies to monitor traffic flowing in and out of government websites. Agencies may request exceptions or compliance delays with written justification within 60 days of the order's issuance. Beijing's foreign ministry said China is "consistently opposed to the over-generalisation of national security" and would safeguard its companies' rights.

Key Takeaway: The mechanism is unremarkable - a July memo, a quiet publication, a 60-day exception window - and that is precisely what makes it consequential. This is not a device ban that staff can work around with a personal phone. "Third-party products and services developed using" DeepSeek means an agency must now trace whether a vendor's assistant, summariser or translation tool has a Chinese base model somewhere in its stack, and most procurement paperwork does not record that. Contractors will be asked a question they cannot confidently answer in 60 days, and the safe answer is to replace the component. Watch the timing against the wider schedule: the FCC votes on 29 October on barring Chinese labs from testing electronics destined for the US, and last year 82% of US electronics were tested in China. Washington is building a perimeter around model provenance and hardware testing at the same time, and neither rule has a mutual-recognition clause. For everyone outside the US federal government, the signal is about diligence: if a $50-per-hack campaign can use DeepSeek and Claude interchangeably, the procurement question is not which model is safest but whether anyone can tell you which model a given tool is actually running.

Sources: DHS notice via Federal Register, 20 October 2026; CNBC, 20 October 2026; Reuters via The Hindu BusinessLine, 20 October 2026