HR 1121 No DeepSeek on Government Devices Act 2025

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Proposed
• Most recent activity date: 2025-02-07

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• Disinformation, surveillance, and influence at scale
• Cyberattacks, weapon development or use
• Competitive dynamics

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document primarily addresses security and national security risks associated with foreign AI applications on government systems. Coverage focuses on AI system security vulnerabilities (2.2), surveillance and cyberattack risks from malicious actors (4.1, 4.2), and competitive dynamics related to strategic AI advantage (6.4). Coverage is concentrated in security and national security domains with minimal detail on specific risk mechanisms.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)
• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Scientific Research & Development Services

All other sectors had no coverage in this document.

Sectors Summary

This Act governs AI use exclusively within federal government operations, with comprehensive coverage of Public Administration (both general government agencies and national security entities). The prohibition applies to all executive agencies with specific exceptions for national security, law enforcement, and research activities.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding Congressional Act with mandatory obligations on executive agencies to remove DeepSeek applications from government IT systems.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is enacted by Congress as evidenced by the standard legislative enactment clause.

Target

• Entity Types: AI_Governance_Actor, AI_User
• Summary: The Act applies to executive agencies that use or have deployed the DeepSeek application on their information technology systems.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The Director of OMB is designated to develop standards and guidelines in consultation with multiple federal agency heads, creating enforcement authority through standard-setting.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: While not explicitly designated as monitors, OMB and CISA's roles in developing standards and cybersecurity oversight suggest monitoring responsibilities for compliance.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle, focusing on removal of deployed AI applications and risk mitigation for authorized operational use. It does not cover earlier stages like planning, data collection, or model building.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document refers to 'covered application' meaning the DeepSeek application as an AI system, but does not explicitly define or distinguish between AI models, AI systems, or specific categories like frontier AI, GPAI, or generative AI. No compute thresholds or technical specifications are mentioned.