DHS directs federal agencies to remove DeepSeek from government systems
The Department of Homeland Security is directing federal civilian agencies within its authority to stop acquiring covered products and remove them from government systems. This is a procurement and systems directive, not a nationwide prohibition on DeepSeek: the cited reporting distinguishes the agency restrictions from private or consumer use. BleepingComputer
The reported scope extends beyond the DeepSeek-branded chatbot. It includes products from company affiliates and third-party products and services built using DeepSeek technology. That makes the order a procurement-policy decision as well as a restriction on a named product. BleepingComputer
What the federal DeepSeek order requires
According to BleepingComputer, agencies are directed to exclude covered products from procurement, including approved-product lists and purchasing marketplaces, and to remove them from agency IT systems or seek an exception. The reporting describes the restriction as applying to federal civilian agencies within DHS’s authority. BleepingComputer
The reported exception process requires an agency to submit a request within 60 days of the order’s issuance, explain its justification and proposed risk mitigations, and await a written decision. BleepingComputer reports that CISA will review requests and issue approvals or denials, and that agencies unable to comply because of internal capability restrictions can seek technical assistance from CISA. BleepingComputer
As a practical implication of those reported requirements, agency technology and purchasing teams may need to locate deployments and procurement pathways, determine whether products fall within the order’s definition, and decide whether removal or an exception is appropriate. These are implementation considerations, not additional deadlines or procedures specified in the cited reporting.
Why DHS cites national-security and cybersecurity risks
BleepingComputer reports that DHS’s stated concerns include the possibility that the Chinese government could access DeepSeek infrastructure, collect personal information, track users, or obtain sensitive government data. The reported rationale also includes the possibility of malware risks in DeepSeek models. These are stated risks behind the government’s action, not proof that every covered tool transmitted federal information or contains malware. BleepingComputer
The distinction between a risk rationale and a demonstrated incident matters: the cited reporting describes potential access and security concerns but does not establish a specific federal breach caused by DeepSeek. BleepingComputer
App-security reporting and the limits of the available evidence
BleepingComputer reports that the order refers to app-security concerns, including a February 2025 NowSecure report about the DeepSeek iOS app. This article does not independently verify that report’s technical findings, so it does not present specific vulnerabilities or testing results as established facts. BleepingComputer
The cited account does not establish that any reported app-security issue affected every DeepSeek product or version, or that it affected federal systems covered by the directive. The narrower supported point is that app-security concerns were reported as part of the rationale for limiting government exposure. BleepingComputer
What the directive does not mean
The reported order applies to federal civilian agencies within DHS’s authority. BleepingComputer distinguishes it from a general ban on private or consumer use; the cited reporting does not support saying that all U.S. residents or private companies are prohibited from using DeepSeek. BleepingComputer
Nor should prospective risks be presented as a confirmed compromise. The reporting describes concerns about possible data access and malware, but does not document a specific federal breach caused by DeepSeek. BleepingComputer
The procurement question agencies now face
The reported requirements make identifying covered products in agency systems and purchasing channels an immediate operational consideration. The order’s reported scope also includes third-party tools built using DeepSeek technology, so agencies may need to assess whether such tools are covered before deciding on removal or an exception. BleepingComputer
For agencies evaluating AI products, the reported policy concerns include data handling, infrastructure, and supply-chain risk. The cited reporting does not establish a general judgment about every Chinese-developed AI system. For broader context on how security mandates shape federal AI deployment, see this analysis of national-security mandates and federal AI deployments.
DHS’s reported action is a targeted federal directive with procurement restrictions, removal expectations, and an exception route. It is not a blanket public ban, and the reported security rationale should not be confused with evidence of a proven, universal compromise. BleepingComputer