Americans' data could be at risk as Roomba's new ownership would be required to hand over sensitive private data to Chinese authorities.
The recent bankruptcy of iRobot, the maker of the Roomba robotic vacuum cleaner, has largely been framed as a familiar business story: an American pioneer squeezed by cheap Chinese competitors, declining margins, and the commoditization of hardware. But this misses a bigger and more concerning point: The potential transfer to China of the data, software, and intelligence embedded in millions of connected devices inside U.S. homes poses a major security risk.
According to its bankruptcy filings, iRobot, through acquisition, has come under the control of a Chinese robotics firm, Picea, iRobot’s original design manufacturer. Even though iRobot has claimed that its data will never leave the United States, the U.S. should take legal action through review by the Committee on Foreign Investment in the United States (CFIUS) to investigate this acquisition and, if necessary, block the sale.
Modern robotic vacuums are no longer simple household appliances. They are mobile Internet of Things (IoT) sensor platforms. Using low-cost light detection and ranging technology (LiDAR), cameras, and advanced simultaneous localization and mapping algorithms, these devices generate detailed three-dimensional models of interior spaces. They create precise geometric maps of homes and continuously track people, pets, furniture, and daily routines.
At scale, such data becomes enormously valuable. Interior spatial data linked to behavioral patterns can be used to train artificial intelligence systems, refine human-environment interaction, and accelerate robotics development well beyond consumer applications. Ownership of that data and of the software architectures that process it matters.
China’s data security and intelligence laws require companies to cooperate with state authorities when requested, and key categories of data are increasingly centralized into national or regional data centers. Consumer data is not treated as purely private or commercial but as a strategic resource. In recent years, Beijing has explicitly pushed to integrate consumer data, algorithm cloud infrastructure, and artificial intelligence into a unified national data framework.
Chinese robotics firms do not operate in isolation. Companies like Picea function within an industrial ecosystem shaped by a state-led industrial policy and strategy that seeks to build globally competitive “national champions.” Picea, like many other national champions, has been endorsed by the party-state and follows the Chinese Communist Party’s doctrines. Through scale manufacturing, preferential financing, and coordinated supply chains, these firms have expanded rapidly across consumer, service, and industrial robotics markets.
Control over a major U.S. smart-home platform would further reinforce that position, not only commercially but technologically, by feeding data into China’s broader robotics and AI development pipeline. A recent U.S. enforcement action found that even a Chinese-manufactured robot toy quietly collected sensitive data from American children, including precise location information, showing how even small, home-based devices can transmit data in ways users neither expect nor control.
Consumer robotics should not be treated as exempt from similar dynamics. In fact, it often serves as the proving ground for autonomy at scale. iRobot’s own origins underscore this reality. Before Roomba entered American living rooms, the company developed PackBot, a tracked robot later used by the U.S. Department of Defense for bomb disposal and reconnaissance. That defense business was divested years ago, but its lineage demonstrates that robotics technologies remain dual-use, even when corporate ownership changes.
When Germany approved China’s 2016 acquisition of KUKA, long a pillar of Western industrial automation, the deal was widely treated as a routine commercial transaction. In hindsight, it helped accelerate China’s rise in industrial robotics, weakened Western competitors, and reinforced Beijing’s push for technological self-sufficiency.
We should not repeat that mistake. Chinese firms already occupy 70 percent of the global consumer robot vacuum market. As iRobot’s original design manufacturer, Picea is unlikely to acquire any technology that it did not already have. More important is the data that iRobot possesses. If an acquisition would place a major U.S. smart-home robotics platform, its data pipelines, or its software roadmap under foreign control, that warrants rigorous review.
Singular CFIUS denial of the iRobot transaction alone will not solve data risks from the millions of other Chinese IoT devices that are entering American homes. This requires a foundational data privacy law to govern both cross-border and companies’ internal data transfers, as well as the accelerated development of the Federal Communications Commission’s Cyber Trust Mark to ensure the basic cybersecurity of IoT devices, among other things.
As a U.S. technological pioneer cedes yet another market to China, this should be yet another wake-up call highlighting the need for a U.S. national robotics strategy. It is critical that the U.S. work with its allies and partners and make investments today to ensure that China does not gain a lasting lead. Vacuums may look harmless. The data they collect, and the legal regime governing who can access it, is not.