The U.S. Department of Homeland Security has disclosed an order requiring civilian agencies to remove DeepSeek-linked technology, putting a federal supply-chain security measure into public view nearly three months after its listed date.
The Federal Register notice for Exclusion and Removal Order #2026-01 was filed Oct. 19 and published Oct. 20. Its signed appendix lists July 24 as the order’s “Original Release Date,” making the filing date 87 days later. The order says its restrictions began upon issuance.
CyberScoop reported that a letter from Homeland Security Secretary Markwayne Mullin directed the exclusion on June 26. The public order lists July 24 and does not explain the discrepancy.
The procurement ban covers information technology products and services developed by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and its affiliates. Agencies must also remove third-party products and services developed using DeepSeek implementations. The order’s reach to third-party products has been covered in earlier EconoTimes reporting. National security systems and secure compartmented information systems are excluded.
DHS said it acted under the Federal Acquisition Supply Chain Security Act of 2018 after reviewing a recommendation from the Federal Acquisition Security Council and related evidence. The order cites servers in China, personal information collection, digital fingerprinting, possible transfers of sensitive prompts and potential malware or vulnerabilities. It describes DeepSeek’s models as presenting “multiple threat vectors,” but the public order does not report a confirmed breach.
The order allowed agencies 60 days from issuance to seek written exceptions, but that period had expired by the Oct. 20 publication. It assigns the Cybersecurity and Infrastructure Security Agency (CISA) to review requests; the public documents do not say whether any were submitted. The operational work falls to covered agencies, and the order gives no cost estimate. During the phaseout, DHS urges agencies to watch network traffic, record system activity more fully, tighten protections around outbound data and investigate irregular behavior.
At an Oct. 20 briefing, Chinese Foreign Ministry spokesperson Mao Ning said China opposed broadening the concept of national security and politicizing technology and trade issues, and would protect Chinese companies’ lawful interests. The order calls for review by the homeland security secretary within one year and annually afterward, without specifying a review date.
