Should Your Firm Ban DeepSeek, TikTok and Other Restricted Technologies?

When governments within the Five Eyes alliance comprising the U.S., U.K., Canada, Australia, and New Zealand ban technologies like TikTok, DeepSeek, Huawei, and Kaspersky, it’s not a decision made lightly. These bans are rooted in serious concerns about national security, data privacy, and cyber vulnerabilities. While governments act based on geopolitical priorities, firms must ask themselves: Are we prepared to manage the risks these technologies pose to our operations?

The Risks Firms Cannot Ignore

The dangers of using foreign-controlled technologies go beyond theoretical concerns - they are real and measurable:

Data Security: Technologies tied to foreign governments have been caught transmitting sensitive information. For example, DeepSeek was found sending user login credentials directly to China Mobile, a state-owned telecommunications company banned in the U.S.. Your firm's sensitive data such as financial records could lead to unauthorized data transmission and to significant data breaches.

Regulatory Compliance: Governments are tightening regulations around technology use. In 2022, a U.S.-based defense contractor faced severe penalties for using Huawei equipment in violation of federal restrictions. This incident underscores the legal and financial risks of ignoring government bans.

Cyber Vulnerabilities: Even when no malicious intent exists, these platforms often have exploitable weaknesses. In an era of sophisticated ransomware attacks and targeted breaches, can your business afford to gamble on insecure technology?

An Alert Wake-Up Call for Accounting Firms

For accounting firms and other industries handling sensitive information, the stakes are even higher. Financial records, personally identifiable information (PII), and corporate strategies are prime targets for cybercriminals. Using restricted technologies could put firms at risk of violating critical regulations like SOX (Sarbanes-Oxley Act), GLBA (Gramm-Leach-Bliley Act), or SEC requirements.

Consider the case of Kaspersky Lab, whose antivirus software was banned by the U.S. government in 2017 due to concerns about Russian intelligence exploitation[5]. Despite the ban, some companies continued using it. When security vulnerabilities were later exposed, these businesses faced reputational damage and intense regulatory scrutiny - a stark reminder of what happens when businesses ignore national security warnings.

Taking Action: How Businesses Can Protect Themselves

Proactive firms are not waiting for mandates - they’re proactively addressing these risks:

Risk Assessments: Conduct thorough evaluations of your technology stack. Examine how software handles data transmission and storage.
Adopt Alternatives: Replace risky platforms with secure alternatives that meet both security and compliance requirements.
Educate Employees: Ensure employees understand why certain technologies are restricted and how to avoid using them in the workplace.
Implement Governance: Particularly for industries like finance or healthcare, establish comprehensive frameworks that address both current and emerging threats.

The Bigger Picture

The wave of government bans on foreign technologies is only growing. As concerns about data security escalate globally, businesses must act now to protect themselves from potential breaches and compliance violations.

The question is no longer whether these technologies pose risks - they clearly do. The real question is whether your firm is prepared to mitigate those risks before they become costly mistakes. Can you afford to wait until after a breach occurs? Are you ready to explain to clients why you continued using compromised technology despite clear warnings?

Conclusion

Government bans on platforms like TikTok, DeepSeek, Huawei, and Kaspersky serve as a wake-up call for businesses. These restrictions highlight critical vulnerabilities that could jeopardize your operations if left unaddressed. By conducting risk assessments, adopting secure alternatives, and educating employees, companies can safeguard their data while maintaining compliance with evolving regulations.

Protecting your firm isn’t just about following government mandates, it’s about making smart choices that ensure long-term security and trustworthiness. The time to act is now.