DHS DeepSeek exclusion and removal order (2026)
AI-generated text. This page was generated using artificial intelligence.
DHS DeepSeek Exclusion and Removal Order #2026-01
United States — covered Federal Civilian Executive Branch agencies
Federal acquisition supply-chain exclusion and removal order
Order #2026-01; DHS-2026-0628; 91 Fed. Reg. 66346–66350; 41 U.S.C. §§ 1321–1328
Issued July 24, 2026; notice and signed order published October 20, 2026.[1]
Required action immediately after issuance; order-specific exceptions and scope apply.[1]
October 20, 2026 — complete published notice and four-page signed-order appendix.[1]
The DHS DeepSeek exclusion and removal order is Exclusion and Removal Order #2026-01, originally released on July 24, 2026 under the Federal Acquisition Supply Chain Security Act of 2018. It directs covered federal civilian agencies to exclude DeepSeek and affiliated products from procurement and remove covered products from their information-technology systems. The notice entered public inspection on October 19 and was published in the Federal Register on October 20, reproducing the signed July order.[1]
Scope
The order applies to Federal Civilian Executive Branch agencies, except for their national-security and compartmented-information systems outside its stated scope. It addresses products and services from DeepSeek and affiliated entities, as well as third-party products and services developed using DeepSeek implementations. Affiliation is defined by direct or indirect control, or common third-party control, with a reference to 48 C.F.R. § 2.101.[1]
The procurement exclusion includes agency-approved product lists, service-provider equipment lists, e-commerce markets and similar mechanisms for acquiring IT hardware, software and services. The removal requirement concerns covered civilian-agency IT systems. This is a federal procurement and agency-system order, not a general prohibition on private use of AI models.[1]
Required actions and exceptions
The order required exclusion and removal immediately after issuance, with removal subject to its exception process. It directed agencies to submit written exception requests within 60 days of issuance; requests could address application to an agency, particular actions or a delay in compliance. Required information includes the order and covered product, the requested exception, compelling justification such as mission or national-interest effects, and proposed alternative mitigations. CISA reviews requests and provides written approval or disapproval.[1]
During the period between issuance and full removal, the order encourages monitoring network traffic, enhanced logging, controls on data exfiltration and detection of anomalous activity. It provides for CISA technical assistance and requires the Secretary’s review within one year and annually thereafter. These directions do not establish which agencies have completed removal or obtained exceptions.[1]
Stated rationale and publication record
DHS cites the Federal Acquisition Security Council’s recommendation and evidence, invoking 41 U.S.C. §§ 1321–1328 and implementing regulations. Its risk account addresses potential transfer of sensitive information through hosted services, foreign-government access and security vulnerabilities. These are the agency’s stated grounds for its supply-chain action.[1]
The notice was filed October 19 at 8:45 a.m. and published October 20 at 91 Fed. Reg. 66346–66350. The published appendix retains the July 24 original release date and order-specific scope and exceptions. Later amendments, agency compliance and exception decisions require separate records.[1]
Related coverage
- October 20 news coverage
- Federal regulations and executive actions
- Government use and procurement
- October 19 news coverage
References
- ↑ 1.00 1.01 1.02 1.03 1.04 1.05 1.06 1.07 1.08 1.09 DHS, Notice of Order Regarding Exclusion and Removal of DeepSeek Products, Docket DHS-2026-0628, FR Doc. 2026-21447, 91 Fed. Reg. 66346–66350, published October 20, 2026; appendix reproduces Exclusion and Removal Order #2026-01, original release July 24, 2026. Complete five-page published notice, including four scanned appendix pages, reviewed October 20, 2026.