Is Kaspersky Lab, the cybersecurity and anti-virus company headquartered in Moscow, currently facing any bans, restrictions, or limitations in its operations, software usage, or government procurement by any specific governments, international organizations, or significant private entities globally? If so, which entities have implemented these measures, what is the geographic scope of the ban/restriction (e.g., entire country, specific departments), what is the specific justification given for the ban/restriction (e.g., national security concerns, data privacy issues, alleged ties to the Russian government), and what are the key details or limitations of these bans/restrictions (e.g., ban on government use only, ban on critical infrastructure, ban on personal use, sunset clauses, exceptions for certain products)? Has the official position or understanding of any major countries or international bodies changed recently regarding Kaspersky?
Answer
Yes, Kaspersky is currently banned or restricted by several governments and organizations.
United States:
- Government-wide ban: In 2017, the Department of Homeland Security (DHS) issued a directive ordering all federal agencies to remove Kaspersky software from their systems. This ban was codified into law later that year. The US government cited concerns about Kaspersky’s ties to the Russian government and the potential for its software to be used for espionage.
- FCC designation as a national security threat: In 2022, the Federal Communications Commission (FCC) designated Kaspersky as a national security threat. This designation prohibits the use of funds from the FCC’s Universal Service Fund to purchase Kaspersky products or services.
- Ban on sales and updates: In June 2024, the Biden administration announced a ban on the sale of Kaspersky antivirus software in the United States, citing national security risks. This ban prohibits new sales, updates, and downloads of Kaspersky software.
United Kingdom:
- Government systems: In 2017, the UK’s National Cyber Security Centre (NCSC) advised government departments to avoid using Kaspersky software for systems handling sensitive information.
European Union:
- Non-binding recommendations: While not a formal ban, several EU member states have issued warnings or recommendations against using Kaspersky products in critical infrastructure.
- European Parliament ban: The European Parliament banned Kaspersky software from its systems in 2018, citing security concerns.
Lithuania:
- Government systems: Lithuania banned Kaspersky software from computers vital to the country’s infrastructure in 2017.
Ukraine:
- Sanctions: Ukraine has imposed sanctions on Kaspersky Lab.
Other Considerations:
- Private sector: Many private companies and organizations have also chosen to stop using Kaspersky products due to security concerns and reputational risks.
It is important to note that Kaspersky has consistently denied any wrongdoing and maintains that it is a privately held company with no ties to the Russian government. They have taken measures to address security concerns, such as relocating data processing and storage to Switzerland. However, the bans and restrictions remain in place due to persistent security concerns.