U.S. Department of Homeland Security requires federal civilian agencies to remove DeepSeek
The U.S. Department of Homeland Security (DHS) has ordered federal civilian agencies to immediately stop procuring DeepSeek products and services and to remove them from government information technology systems; the order applies to civilian executive branch agencies, excludes national security systems, and does not restrict public use of DeepSeek. DHS says the DeepSeek model has multiple threat vectors, with reasons including servers located in China, account registration collecting personally identifiable information, multiple critical vulnerabilities found in the iOS app, and prompt interactions potentially allowing sensitive data to leak out. China's Ministry of Commerce responded that it consistently opposes over-broadening the concept of national security and politicizing science, technology and trade issues, and stated it will take all necessary measures to safeguard the legitimate rights and interests of Chinese enterprises.
Why read this
AI score 73
The U.S. Department of Homeland Security requires federal civilian agencies to stop using DeepSeek, citing data and vulnerability reasons, so readers can understand the boundaries of this regulatory action and China's response.
Topics
Body
The US Department of Homeland Security (DHS) has ordered federal civilian agencies to stop procuring products and services from Chinese artificial intelligence company DeepSeek and to remove it from government information technology systems.
The order applies to civilian executive branch agencies, except their national security systems, and does not restrict the general public from using DeepSeek
"Third-party products and services developed using DeepSeek implementations," DHS noted in its order. Agencies must exclude DeepSeek from procurement immediately, it added.
DHS notice alleged, "DeepSeek's models present multiple threat vectors." It noted that DeepSeek's servers were located in China, whose legal system "permits extensive authority to government cyber and intelligence functions to access private company infrastructure."
It claimed that DeepSeek's account registration collects personally identifiable information and "may also track and digitally fingerprint users," and warned that the transfer of such data "could produce actionable intelligence on US persons and/or government programmes."
DHS, in its order, added that the models "may contain malware or other security vulnerabilities," citing security research that found multiple critical vulnerabilities in DeepSeek's iOS application.
DeepSeek mostly functions “through a prompt-and-response process that requires presenting information to the model, and which may result in the transfer of sensitive data to the PRC if used by US government employees or vendors,” DHS noted in its order.
The agency feared that this could result in the information being transferred to the PRC, ”either independently or in combination with publicly available data,” possibly producing “actionable intelligence on US persons and/or government programs.”
Beijing responded, saying China "consistently opposes overstretching the concept of national security and politicising tech and trade issues," and adding, "We will resolutely safeguard Chinese businesses' lawful rights and interests."
China’s Ministry of Commerce further expressed that it "will closely follow the developments and take all necessary measures" to safeguard Chinese tech businesses' legitimate rights and interests.
It said Chinese AI companies abide by the laws of the countries where they operate, pointing to China's Cybersecurity Law and Personal Information Protection Law.