The Department of Homeland Security filed its notice on October 19, 2026, at 8:45 a.m., and the Federal Register scheduled formal publication for October 20. The notice describes an order covering DeepSeek-related products in federal civilian agency procurement and IT systems. The Federal Register listing gives the filing and publication dates; the notice sets out the order’s scope.
What the order covers
The order has two distinct parts: one excludes specified products and services from civilian-agency procurement, while the other calls for covered products to be removed from civilian-agency IT systems.
| Action | Where it applies | Products and services covered |
| Procurement exclusion | Federal civilian agency procurements | Information technology products and services developed by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., including affiliates as defined in applicable regulations |
| Removal | Federal civilian agency IT systems | DeepSeek and affiliate products, plus third-party products and services developed using DeepSeek implementations |
The third-party provision reaches products and services built using DeepSeek implementations. The notice does not name particular vendors in that category.
Exceptions and interim security measures
CyberScoop reports that agencies seeking an exception must apply 60 days in advance and provide a compelling justification, such as a mission-critical need or a national-security consideration. It also reports that agencies are encouraged to monitor network traffic and strengthen logging and controls for data exfiltration while removal is underway. Those measures are described as recommendations during the removal process. (CyberScoop’s report covers both the exception procedure and interim measures.)
Legal authority and implementation contact
The notice cites the Federal Acquisition Supply Chain Security Act of 2018, 41 U.S.C. 1321–1328, and implementing regulations at 41 CFR 201-1. DHS says the order followed review of a recommendation from the Federal Acquisition Security Council and related evidence. The notice directs implementation questions to the FASCSA Order Implementation Team in CISA’s Cybersecurity Division.
