technology.
Agencies must immediately exclude covered products from procurement, including approved-product lists and purchasing marketplaces. They must also remove the products from systems or seek an exception. Exception requests are due within 60 days of the order's issuance and must describe the justification and proposed risk mitigations; CISA will issue written approvals or denials.
DHS cited concerns about Chinese government access to DeepSeek infrastructure, personal-data collection, user tracking, and potential transfers of sensitive government data to China. The order is not a general ban on private or consumer use in the United States.
The source does not establish how many agencies or systems currently use DeepSeek, which specific third-party products are covered, or how many exceptions CISA will grant.