Kate M. GrowleyCIPP/G/US, AIGP, CMMC RP
Overview
|
Businesses around the globe rely on Kate M. Growley to navigate their most challenging digital issues, particularly those involving cybersecurity, artificial intelligence, digital infrastructure, and their intersection with national security. Clients seek her guidance on proactive compliance, incident response, internal and government-facing investigations, and policy engagement. With a unique combination of legal, policy, and consulting experience, Kate excels in translating complex technical topics into advice that is practical and informed by risk and business needs. | ![]() |
Career & Education
- Florida State University, B.S., summa cum laude, International Relations
- University of Virginia School of Law, J.D.
- Virginia
- District of Columbia
Kate's Insights
Client Alert | 2 min read | 10.21.26
FASCSA Orders Require Exclusion and Removal of DeepSeek AI
New Federal Acquisition Supply Chain Security Act (FASCSA) orders from the Department of Homeland Security (DHS), the Department of War (DoW), and the Director of National Intelligence (DNI) require the exclusion and removal of products and services by DeepSeek and its affiliated entities (collectively, DeepSeek).1 The DoW and DNI orders are laid out in their entirety within the SAM.gov downloadable spreadsheet of FASCSA orders, and neither provides details about the reasons for excluding or removing DeepSeek. By contrast, the civilian order, published on October 20, 2026, identifies DeepSeek’s free open-source artificial intelligence (AI) models as “present[ing] multiple threat vectors.” These include threat vectors associated with the company’s known technical vulnerabilities, obligation to provide the government of the People’s Republic of China certain access, and the fact that information collected by the company’s apps and AI models could be used to create “actionable intelligence” about the U.S. government.
Client Alert | 7 min read | 10.02.26
Press Coverage | 09.23.26
Client Alert | 4 min read | 09.21.26
In a First, District Court Dismisses FCA Cybersecurity Complaint for Lack of Materiality
Insights
Kate's Insights
Client Alert | 2 min read | 10.21.26
FASCSA Orders Require Exclusion and Removal of DeepSeek AI
New Federal Acquisition Supply Chain Security Act (FASCSA) orders from the Department of Homeland Security (DHS), the Department of War (DoW), and the Director of National Intelligence (DNI) require the exclusion and removal of products and services by DeepSeek and its affiliated entities (collectively, DeepSeek).1 The DoW and DNI orders are laid out in their entirety within the SAM.gov downloadable spreadsheet of FASCSA orders, and neither provides details about the reasons for excluding or removing DeepSeek. By contrast, the civilian order, published on October 20, 2026, identifies DeepSeek’s free open-source artificial intelligence (AI) models as “present[ing] multiple threat vectors.” These include threat vectors associated with the company’s known technical vulnerabilities, obligation to provide the government of the People’s Republic of China certain access, and the fact that information collected by the company’s apps and AI models could be used to create “actionable intelligence” about the U.S. government.
Client Alert | 7 min read | 10.02.26
Press Coverage | 09.23.26
Client Alert | 4 min read | 09.21.26
In a First, District Court Dismisses FCA Cybersecurity Complaint for Lack of Materiality





