DeepSeek Bans Spread Across Governments as Security Concerns Mount
Governments across multiple continents have banned or restricted DeepSeek on official devices following cybersecurity research revealing hidden code capable of transmitting user data to China Mobile, a state-controlled telecommunications company previously barred from U.S. operations.
TL;DR
DeepSeek faces government bans in Australia, Taiwan, Italy, Czech Republic, the Netherlands, and multiple U.S. states and federal agencies. Cybersecurity firm Feroot Security discovered hidden code in DeepSeek's web platform linking to China Mobile's authentication registry. The "No DeepSeek on Government Devices Act" advances through Congress with bipartisan support. DeepSeek's privacy policy acknowledges storing personal data—including keystroke patterns, IP addresses, and uploaded files—on servers in China, where law grants Beijing broad authority to access data from domestic companies.
The Hidden Code Discovery
Cybersecurity firm Feroot Security revealed that DeepSeek contains hidden code capable of transmitting user data to China Mobile's online registry, CMPassport.com [1].
Technical Findings
Feroot CEO Ivan Tsarynny used AI software to decrypt portions of DeepSeek's code and found "intentionally hidden programming that has the capability to send user data" to China Mobile [2].
| Finding | Detail |
|---|---|
| Destination | CMPassport.com (China Mobile registry) |
| Connection Type | Direct links to servers under Chinese government control |
| Verification | Independently confirmed by University of Calgary and UC Berkeley researchers |
| Scope | Web version of DeepSeek analyzed |
"We see direct links to servers and companies in China that are under control of the Chinese government. This is something we've never seen before," Tsarynny explained [3].
Cybersecurity researchers Joel Reardon of the University of Calgary and Serge Egelman of UC Berkeley independently verified Feroot's findings, confirming China Mobile-linked authentication code in DeepSeek's login system [4].
China Mobile Background
China Mobile is a state-controlled telecommunications company previously delisted from the New York Stock Exchange due to security risks [5]. The Federal Communications Commission has banned China Mobile from operating in the United States [6].
Government Bans: Country by Country
United States
Multiple federal agencies and states have issued DeepSeek bans [7]:
| Entity | Action | Date |
|---|---|---|
| U.S. Navy | Banned from all use | January 2025 |
| NASA | Banned from government devices | January 2025 |
| Department of Commerce | Banned from government devices | February 2025 |
| Texas | First state ban | January 31, 2025 |
| New York | Statewide ban on government devices | February 2025 |
| Virginia | State government ban | February 2025 |
| Tennessee | State government ban | February 2025 |
Texas Governor Greg Abbott announced the first state-level ban, stating the state "will not allow the Chinese Communist Party to infiltrate our state's critical infrastructure through data-harvesting AI" [8].
New York Governor Kathy Hochul enacted a statewide ban on DeepSeek across all government devices and networks [9].
Australia
In early February 2025, Australia banned DeepSeek from all government devices [10]. Home Affairs Minister Tony Burke characterized DeepSeek as posing an "unacceptable risk" to government technology, implementing an immediate ban "to protect Australia's national security and national interest" [11].
All government bodies, except corporate organizations like Australia Post and the ABC, must remove all DeepSeek products from their devices [12].
Taiwan
Taiwan banned government departments from using DeepSeek's service in February 2025 [13]. Premier Cho Jung-tai stated DeepSeek was banned from all government agencies "to ensure the country's information security" [14].
The Ministry of Digital Affairs issued an explicit statement: "DeepSeek AI service is a Chinese product. Its operation involves cross-border transmission, and information leakage and other information security concerns" [15].
Taiwan's concerns included:
- Data-sourcing practices potentially violating copyright laws
- Ideological censorship in language model training
- Risk of data ending up in China [16]
Italy
Italy became the first country to issue an emergency ban on DeepSeek [17]. On January 30, 2025, the Italian Data Protection Authority (Garante) imposed an immediate limitation on processing Italian users' personal data by DeepSeek [18].
The Garante found DeepSeek's responses to information requests "insufficient and inadequate" after the companies claimed they did not operate in Italy and were not subject to GDPR [19]. This marked the first emergency ban on an AI chatbot under GDPR [20].
Czech Republic
The Czech government banned all DeepSeek products from public administration in July 2025 [21]. Prime Minister Petr Fiala announced the decision following recommendations from the National Cyber and Information Security Agency (NÚKIB), which warned that DeepSeek's data handling practices "may allow unauthorized access by Chinese state authorities" [22].
Netherlands
The Netherlands privacy watchdog launched an investigation into DeepSeek's data collection practices at the end of January 2025, urging Dutch users to exercise caution [23]. The government banned civil servants from using the app within 72 hours of security reviews, citing policy regarding "countries with an offensive cyber program" [24].
Congressional Action: No DeepSeek on Government Devices Act
On February 6, 2025, Representatives Josh Gottheimer (D-NJ) and Darin LaHood (R-IL) introduced the bipartisan "No DeepSeek on Government Devices Act" (H.R. 1121) [25].
Bill Provisions
| Requirement | Detail |
|---|---|
| Primary Action | Directs OMB to develop standards requiring DeepSeek removal from federal IT |
| Scope | All federal agency information technology |
| Successor Coverage | Applies to any successor application by High Flyer or related entities |
Both representatives serve on the House Permanent Select Committee on Intelligence [26].
Senate Companion
A bipartisan trio of senators introduced companion legislation (S.765) to ban DeepSeek from all federal government devices and networks [27].
Senators Bill Cassidy (R-LA) and Jacky Rosen (D-NV) introduced the "Protection Against Foreign Adversarial Artificial Intelligence Act of 2025" to prohibit federal contractors from using DeepSeek to fulfill contracts with federal agencies [28].
Privacy Policy: What DeepSeek Admits
DeepSeek's own privacy policy acknowledges concerning data practices [29]:
| Data Category | Collection Scope |
|---|---|
| Device Information | Device model, operating system |
| User Behavior | Keystroke patterns or rhythms |
| Network Data | IP address, system language |
| Content | Requests to AI program, uploaded files |
| Storage Location | Servers in People's Republic of China |
Former Homeland Security and NSA official Stewart Baker compared DeepSeek's risks to TikTok but warned the AI chatbot poses an even greater threat: "It raises all of the TikTok concerns plus you're talking about information that is highly likely to be of more national security and personal significance than anything people do on TikTok" [30].
House Select Committee Findings
The House Select Committee on the Strategic Competition Between the United States and the Chinese Communist Party released a report characterizing DeepSeek as a "profound threat" to U.S. national security [31].
Key Allegations
| Allegation | Detail |
|---|---|
| Data Collection | App siphons data back to the PRC |
| Security Vulnerabilities | Creates security vulnerabilities for users |
| Content Manipulation | Covertly censors and manipulates information pursuant to Chinese law |
| Technology Theft | Likely used unlawful model distillation techniques stealing from U.S. AI models |
| Chip Access | Uses "tens of thousands" of restricted NVIDIA AI chips |
An unnamed OpenAI executive told the committee that internal review found DeepSeek employees bypassed safeguards in OpenAI's models to extract reasoning outputs used for "distillation"—a technique to speed development of advanced AI capabilities [32].
Additional Investigations
Multiple data protection authorities have opened investigations [33]:
| Country | Agency | Status |
|---|---|---|
| South Korea | Personal Information Protection Commission | Suspended downloads February 2025; reinstated April 2025 after modifications |
| France | CNIL | Investigation ongoing |
| Belgium | Data Protection Authority (GBA) | Formal investigation since January 30, 2025 |
| Ireland | Data Protection Commission | Investigation ongoing |
| Germany | Request to remove from app stores pending |
South Korea suspended new DeepSeek downloads after the startup acknowledged failing to account for some personal data protection rules [34]. The ability to download was reinstated in April 2025 after modifications [35].
India's Ministry of Finance advised staff to refrain from using AI tools including ChatGPT and DeepSeek for official duties, citing concerns about sensitive document safety [36].
Industry Comparison: DeepSeek vs. TikTok
The regulatory response to DeepSeek echoes the trajectory of TikTok restrictions, but with accelerated timelines and broader scope [37].
| Factor | TikTok | DeepSeek |
|---|---|---|
| Primary Concern | Social media data collection | Direct data pipeline to state telecom |
| Time to First Government Ban | Years | Weeks |
| Hidden Code Discovery | None publicly confirmed | China Mobile links confirmed |
| Data Sensitivity | Entertainment preferences | Keystrokes, uploaded documents, code |
| Professional Use Cases | Limited | Government, enterprise, development |
Representative Raja Krishnamoorthi, top Democrat on the House Select Committee on Strategic Competition with China, stated: "I think there's absolutely the intention by the CCP to collect data of Americans and user data worldwide" [38].
Implications for AI Infrastructure
The spreading bans carry implications for organizations evaluating AI deployment:
Immediate Considerations
- Government Contracts: Federal contractors face potential prohibitions on DeepSeek use for fulfilling contracts
- Supply Chain Risk: Organizations partnering with government entities must evaluate AI tool policies
- Data Residency: China-based data storage conflicts with many compliance frameworks
Broader Trends
The DeepSeek restrictions suggest increasing bifurcation of AI infrastructure along geopolitical lines. As governments mandate removal of Chinese AI tools, organizations must maintain parallel capabilities or choose between market access and specific AI providers.
Conclusion
DeepSeek's rapid rise has been matched by equally rapid regulatory response. The discovery of hidden code linking to China Mobile—combined with acknowledged data storage in China and alleged technology theft—has created a convergence of security concerns that governments across multiple continents are addressing through outright bans.
With bipartisan U.S. legislation advancing and multiple international investigations ongoing, DeepSeek faces an increasingly fragmented global landscape where its technical capabilities may matter less than its ownership and data practices. For infrastructure operators, the lesson extends beyond DeepSeek to any AI tool whose data practices conflict with national security frameworks.
Citations
[1] Feroot Security. "Feroot Security Research Reveals DeepSeek AI's Hidden Data Pipeline to China." February 2025. https://www.feroot.com/news/feroot-security-research-reveals-deepseek-ais-hidden-data-pipeline-to-china/
[2] ABC News. "DeepSeek coding has the capability to transfer users' data directly to the Chinese government." February 2025. https://abcnews.go.com/US/deepseek-coding-capability-transfer-users-data-directly-chinese/story?id=118465451
[3] The Independent via Feroot. "Feroot Security Uncovers DeepSeek's Hidden Code Sending User Data to China." February 2025. https://www.feroot.com/news/the-independent-feroot-security-uncovers-deepseeks-hidden-code-sending-user-data-to-china/
[4] PBS NewsHour. "Researchers link DeepSeek's chatbot to Chinese Mobile, telecom banned from operating in U.S." February 2025. https://www.pbs.org/newshour/world/researchers-link-deepseeks-chatbot-to-chinese-mobile-telecom-banned-from-operating-in-u-s
[5] Bitdefender. "DeepSeek Could Send Your Data to a Chinese Telecom Company, Researchers Find." February 2025. https://www.bitdefender.com/en-us/blog/hotforsecurity/deepseek-could-send-your-data-to-a-chinese-telecom-company-researchers-find
[6] Gottheimer House. "Gottheimer, LaHood Introduce New Bipartisan Legislation to Protect Americans from DeepSeek." February 6, 2025. https://gottheimer.house.gov/posts/release-gottheimer-lahood-introduce-new-bipartisan-legislation-to-protect-americans-from-deepseek
[7] The Conference Board. "State and Federal Governments Move to Ban DeepSeek on Government Devices." 2025. https://www.conference-board.org/research/CED-Newsletters-Alerts/state-and-federal-governments-deepseak-ban
[8] GovTech. "Where's DeepSeek Banned? The States Blocking Chinese-Made AI." 2025. https://www.govtech.com/biz/data/wheres-deepseek-banned-the-states-blocking-chinese-made-ai
[9] Governor Kathy Hochul. "Governor Hochul Issues Statewide Ban on DeepSeek Artificial Intelligence for Government Devices and Networks." February 2025. https://www.governor.ny.gov/news/governor-hochul-issues-statewide-ban-deepseek-artificial-intelligence-government-devices-and
[10] GovInsider. "Australia latest to ban usage of DeepSeek in government devices." February 2025. https://govinsider.asia/intl-en/article/australia-latest-to-ban-usage-of-deepseek-in-government-devices
[11] Gadens. "Australian government bans DeepSeek: National security déjà vu." February 2025. https://www.gadens.com/legal-insights/australian-government-bans-deepseek-national-security-deja-vu/
[12] Gadens. "Australian government bans DeepSeek." https://www.gadens.com/legal-insights/australian-government-bans-deepseek-national-security-deja-vu/
[13] Taiwan News. "Taiwan government prohibited from using DeepSeek." February 4, 2025. https://www.taiwannews.com.tw/news/6028840
[14] U.S. News. "Taiwan Bans Government Departments From Using DeepSeek AI." February 3, 2025. https://www.usnews.com/news/top-news/articles/2025-02-03/taiwan-bans-government-departments-from-using-deepseek-ai
[15] The Hacker News. "Taiwan Bans DeepSeek AI Over National Security Concerns, Citing Data Leakage Risks." February 2025. https://thehackernews.com/2025/02/taiwan-bans-deepseek-ai-over-national.html
[16] RFA. "DeepSeek dilemma: Taiwan's public sector ban highlights global AI security concerns." February 3, 2025. https://www.rfa.org/english/china/2025/02/03/china-taiwan-deep-seek-ban/
[17] HIMSS. "DeepSeek Blocked in Italy Due to Privacy Risks – Setting a Significant Precedent." 2025. https://www.himss.org/news-center/deepseek-blocked-italy-due-privacy-risks-setting-significant-precedent/
[18] Bird & Bird. "The Garante imposes a definitive limitation on the processing of Italian users' personal data." 2025. https://www.twobirds.com/en/insights/2025/the-garante-imposes-a-definitive-limitation-on-the-processing-of-italian-users%E2%80%99-personal-data
[19] Security Affairs. "Italy's data protection authority Garante blocked the DeepSeek AI platform." January 2025. https://securityaffairs.com/173680/security/italys-data-protection-authority-garante-blocked-deepseek.html
[20] HIMSS. "DeepSeek Blocked in Italy." https://www.himss.org/news-center/deepseek-blocked-italy-due-privacy-risks-setting-significant-precedent/
[21] Expats.cz. "Czech government bans China's DeepSeek AI, warns of security risks." July 2025. https://www.expats.cz/czech-news/article/czech-government-bans-chain-s-deepseek-ai-warns-of-security-risk
[22] Euronews. "Czech Republic bans Chinese AI startup DeepSeek in government work over cybersecurity concerns." July 10, 2025. https://www.euronews.com/next/2025/07/10/czech-republic-bans-chinese-ai-startup-deepseek-in-government-work-over-cybersecurity-conc
[23] Insurance Journal. "Governments, Regulators Increase Scrutiny of Chinese AI Startup DeepSeek." January 7, 2026. https://www.insurancejournal.com/news/international/2026/01/07/853376.htm
[24] Medium. "Why Netherlands Banned DeepSeek in 72 Hours." January 2026. https://medium.com/write-a-catalyst/why-netherlands-banned-deepseek-in-72-hours-14a3f89d25b9
[25] Congress.gov. "H.R.1121 - 119th Congress (2025-2026): No DeepSeek on Government Devices Act." February 2025. https://www.congress.gov/bill/119th-congress/house-bill/1121
[26] Congressman Darin LaHood. "LaHood, Gottheimer Introduce Legislation to Counter CCP's DeepSeek AI Software." February 2025. https://lahood.house.gov/2025/2/lahood-gottheimer-introduce-legislation-to-counter-ccp-s-deepseek-ai-software
[27] Congress.gov. "S.765 - 119th Congress (2025-2026): No DeepSeek on Government Devices Act." 2025. https://www.congress.gov/bill/119th-congress/senate-bill/765
[28] Senator Bill Cassidy. "Cassidy, Rosen Introduce Legislation to Protect Sensitive Federal Data from DeepSeek, Adversarial AI Technologies." May 2025. https://www.cassidy.senate.gov/newsroom/press-releases/cassidy-rosen-introduce-legislation-to-protect-sensitive-federal-data-from-deepseek-adversarial-ai-technologies/
[29] CBS News. "DeepSeek AI raises national security concerns, U.S. officials say." February 2025. https://www.cbsnews.com/news/deepseek-ai-raises-national-security-concerns-trump/
[30] The Hill. "DeepSeek's rise raises data privacy, national security concerns." February 2025. https://thehill.com/policy/technology/5126075-chinese-ai-model-raises-national-security-concerns/
[31] House Select Committee on the CCP. "DeepSeek Report." 2025. https://selectcommitteeontheccp.house.gov/sites/evo-subsites/selectcommitteeontheccp.house.gov/files/evo-media-document/DeepSeek%20Final.pdf
[32] HPC Wire. "US Lawmakers Accuse DeepSeek of Data Harvesting, Espionage, and AI Theft." April 24, 2025. https://www.hpcwire.com/2025/04/24/us-lawmakers-accuse-deepseek-of-data-harvesting-espionage-and-ai-theft/
[33] Cryptopolitan. "DeepSeek face worldwide regulatory scrutiny." 2026. https://www.cryptopolitan.com/deepseek-face-worldwide-regulatory-scrutiny/
[34] Insurance Journal. "Governments, Regulators Increase Scrutiny of DeepSeek." https://www.insurancejournal.com/news/international/2026/01/07/853376.htm
[35] Insurance Journal. "Governments, Regulators Increase Scrutiny of DeepSeek." https://www.insurancejournal.com/news/international/2026/01/07/853376.htm
[36] Digital Rights Monitor. "Countries across the world are scrutinising DeepSeek over privacy concerns." 2025. https://digitalrightsmonitor.pk/countries-across-the-world-are-scrutinising-deepseek-over-privacy-concerns/
[37] Tom's Guide. "DeepSeek AI banned by NASA, US Navy, and more over privacy concerns." February 2025. https://www.tomsguide.com/computing/online-security/deepseek-ai-banned-by-nasa-us-navy-and-more-over-privacy-concerns
[38] ABC News. "DeepSeek coding has the capability to transfer users' data directly to the Chinese government." https://abcnews.go.com/US/deepseek-coding-capability-transfer-users-data-directly-chinese/story?id=118465451
