The order targets procurement, not a measured data path. Civilian federal agencies must remove Deepseek products and cannot buy them later, including software from other vendors built on Deepseek open-source models.

Washington says the worry is that sensitive data could reach China through Deepseek, but the document does not measure any transfer. The text supports a removal and purchase ban, not proof of access.

China's response is a policy signal rather than a measured countermeasure. Officials accuse the US of stretching national security and demand the ban be lifted.

The domestic review is broader. The Cyberspace Administration reviews AI services across the whole market, and state bodies and state-owned companies are expected to replace foreign hardware and software with domestic products.

The story is policy scope, not data flow.