Roborock Officially Addresses Information Security Controversy... "No Data Provided to Third Parties Without Consent"

"Privacy Policy Under Review and Continuous Improvement"
Possibility of Personal Data Sharing in Privacy Guidelines
Controversy Over Potential Transfer to Chinese Headquarters and Affiliates

Chinese robot vacuum cleaner company Roborock recently addressed the information security controversy by officially stating, "We do not provide user data to third parties without user consent, unless otherwise stipulated by Korean law." They explained that they are continuously improving related laws to protect personal information.

On the 26th, Roborock said in a statement, "Regarding concerns about Roborock user data security and personal information protection mentioned in some recent media reports, we would like to clearly clarify the facts as follows."

Previously, Roborock sparked controversy in Korea by stating in its privacy policy posted on its website that customer personal information could be shared with affiliates or other service providers. The Chinese Data Security Law enacted in 2021 stipulates that companies must cooperate if the government collects data for national security reasons. According to this guideline, there is a possibility of transferring personal information to other affiliates, including the Chinese headquarters.

Roborock's Robot Vacuum Cleaner Products, Photo by Roborock

In response, Roborock stated that it applies the latest TLS (Transport Layer Security protocol) encryption technology to encrypt all data transmitted to servers, ensuring security.

Roborock explained that it obtained the Internet of Things (IoT) personal information protection service certification from the German global certification body 'T?V Rheinland.' Roborock said, "This certification is based on the global consumer IoT device network security standards developed by the European Telecommunications Standards Institute (ETSI) in collaboration with industry, academia, and government."

They added that the new products 'S9 MaxV Ultra' and 'S9 MaxV Slim,' which were unveiled on the 20th and officially went on sale, received the highest IoT security rating, the Diamond certification, from the U.S. global certification body 'UL Solutions.'

Roborock stated, "We deeply recognize the importance of protecting user personal information and are working with Korean legal advisors to review and continuously improve privacy protection policies in compliance with Korean Personal Information Protection Act and regulations." They added, "We assure that all user data processing activities strictly comply with Korean laws and regulations, and we promise to ensure that related activities continue to be conducted transparently and securely within the compliance framework."