Major robot vacuums sold in South Korea, including those from Samsung Electronics, LG Electronics, and Roborock, have been found to handle personal data such as camera footage, voice commands, photos, and mapping information without significant risk of privacy violations. However, some instances were identified where the legal basis for data processing was not clearly distinguished in privacy policies, and user choice was not adequately ensured.
The Personal Information Protection Commission (PIPC) announced on September 14 that it had conducted a review of the data handling practices of major robot vacuums sold in the country.
The review focused on the latest models of robot vacuums from brands like Roborock, Samsung Electronics, LG Electronics, Ecovacs, and Xiaomi, as of March last year. The PIPC examined how video, audio, photos, and mapping information collected through the vacuums' cameras and microphones are processed, transmitted, and stored.
The findings revealed that when users check real-time video from the robot vacuum's camera via an app, the video data is encrypted and transmitted to the user's app without being stored on the company's servers. Similarly, when users give voice commands to the vacuum, the original audio is not stored on the server; instead, it is converted to text for processing. Captured photos are also temporarily stored and then deleted.
The PIPC stated that no significant risks of personal data breaches were identified in the collection, transmission, and storage processes of video, audio, photos, and mapping information handled by the robot vacuums.
However, the review found some shortcomings in user guidance regarding data processing and compliance with legal obligations. Notably, there were cases where the legal basis for data processing was not clearly communicated to users.
Some companies provided combined information on personal data that could be processed without user consent for contract execution and data that required user consent, without clear differentiation. The PIPC has advised these companies to clarify their privacy policies and distinctly outline the legal bases for data processing.
Additionally, the PIPC has called for improvements to enhance user choice during the data collection process for service enhancements. It urged companies to provide clearer guidance and selection procedures for users regarding the provision of personal information.
Looking ahead, the PIPC plans to conduct further reviews in the second half of the year on new models of robot vacuums sold in South Korea to assess potential privacy risks associated with functional changes.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.