DHS FASCSA Order 2026-01 Removes DeepSeek and Third-Party Products Built on It From Federal Civilian IT: Dated 24 July, Published 20 October 2026

What DHS published on 20 October 2026 about DeepSeek

On 20 October 2026 the Federal Register carried a notice from the Department of Homeland Security (91 FR 66346, Docket DHS-2026-0628). Behind it sit four scanned pages: Exclusion and Removal Order #2026-01, issued under the Federal Acquisition Supply Chain Security Act of 2018 and bearing the signature of Secretary Markwayne Mullin and an original release date of 24 July 2026. The order bars DeepSeek and its affiliates from civilian agency procurements and directs agencies to remove DeepSeek products, and third-party products developed using DeepSeek implementations, from their information technology systems. Both duties run from issuance. National security systems and compartmented systems are outside its scope.

Why the 88 days between the 24 July release date and 20 October publication matter

The order gives agencies 60 days from issuance to request an exception from DHS. If the 24 July release date is the issuance date, that window closed on 22 September, four weeks before Federal Register publication. For contractors the order arrives through the FASCSA order clause in their contracts, FAR 52.204-30, which brings an order issued after solicitation into a contract's prohibition by modification, while its review and reporting duties can apply sooner. This post follows the order through its dates, from the Kaspersky directive of 2017 to the annual review due in July 2027, and explains why the phrase about third-party products reaches far beyond one Chinese company's chatbot.