The US Department of Homeland Security is ordering DeepSeek products — and third-party services built using the Chinese AI model — removed from US civilian agency IT systems, and is banning agencies from acquiring them, according to a notice published Monday, October 19, 2026. Why it matters: earlier bans covered individual agencies and devices; this order extends removal and a procurement ban across civilian government, including products from third parties that use DeepSeek underneath.
October 19, 2026
What happened
Reuters reported that DHS said DeepSeek models pose “multiple threat vectors”. The department raised concerns that use of the product “may result in the transfer of sensitive data to the PRC if used by US government employees or vendors”, that agency use “could produce actionable intelligence on US persons and/or government agencies”, and that the models themselves may contain malware or other security vulnerabilities.
The order also surfaced a July DHS memo, made public Monday, in which the department told federal agencies to monitor flows of traffic in and out of government websites to address potential risks from DeepSeek.
AI Affairs reported that the Secretary of Homeland Security acted under the Federal Acquisition Supply Chain Security Act of 2018, after reviewing a Federal Acquisition Security Council recommendation. On that reporting, the exclusion covers products and services from Hangzhou DeepSeek Artificial Intelligence Co., Ltd and affiliated entities, the signed order appears on Regulations.gov under docket DHS-2026-0628, and the notice is scheduled for Federal Register publication on October 20.
How this goes further than earlier bans
Several US agencies — including the Department of Commerce and the Navy — had already banned DeepSeek on government devices, and states including New York, Tennessee and Virginia took similar steps. The new order is broader in two ways: it requires removal from civilian agency IT systems generally, not just named devices, and it reaches third-party products and services developed using DeepSeek, so a vendor tool with DeepSeek inside it is covered even if the DeepSeek name is nowhere on the box.
The Chinese Embassy in Washington did not immediately comment, Reuters said.
Why it matters
For most readers the direct effect is narrow — this is about federal civilian systems, not personal phones or private business use. The indirect effect is wider: any company selling software to the US government now has to know whether DeepSeek sits anywhere in its stack, and any business using DeepSeek-powered third-party tools should expect harder procurement questions from regulated customers. Model choice is becoming a supply-chain decision, with paperwork to match.
Frequently asked questions
Does the DHS order ban DeepSeek for everyone in the US?
No. Reuters described an order covering US civilian government agency IT systems and agency acquisition. It does not ban private or personal use.
Are third-party products affected?
Yes. The order covers removal of DeepSeek products and third-party services developed using DeepSeek, and bans acquisition of both.
Why does DHS say DeepSeek is a risk?
DHS cited possible transfer of sensitive data to China, the possibility of actionable intelligence on US persons and agencies, and the possibility that the models contain malware or other security vulnerabilities.
Sources: Reuters (October 19, 2026); AI Affairs (October 19, 2026)