The US Robot Security Rule Is Broader – and Narrower – than the Headlines
The FCC has placed foreign-produced advanced robotic devices on its Covered List. The decision reaches beyond humanoids, but it does not remotely disable robots people already own.
The US Federal Communications Commission updated its Covered List on 28 July to include foreign-produced “advanced robotic devices” and, separately, connected power inverters. The action followed national-security determinations that the product categories posed unacceptable risk.
For covered robots, the practical effect is that new foreign-produced models cannot obtain the FCC equipment authorisation normally required before radio-frequency devices can be imported, marketed or sold in the United States, unless the US Department of War grants conditional approval. The Department of Homeland Security pathway applies to the separately listed power inverters, not to the robot category.
This is a significant market restriction, but it is not a blanket ban on owning or operating previously authorised devices. Existing models are not automatically confiscated or remotely switched off, and the FCC has provided a route for continued security-related software and firmware changes.
The definition extends beyond humanoids
The underlying definition concerns networked mobile ground robots that can perceive and navigate their environment and meet specified weight and connectivity thresholds. That can include humanoid and quadruped systems as well as some robot vacuums and lawn mowers. Fixed industrial arms, drones, connected vehicles and specified assistive or medical devices sit outside the definition or are addressed separately.
Organisations should read the official notice and determination rather than making procurement decisions from a headline.
Why a robot creates a different security problem
A networked robot combines sensors, mapping, software updates, cloud accounts and physical movement. A compromise could expose images or spatial data, create a route into a local network, interrupt a fleet or cause a device to act in the physical environment.
Supply-chain concentration adds another concern. A vendor or foreign authority with influence over update services, model weights or critical components may create a strategic dependency even when no individual product is known to be compromised.
What buyers should do now
US importers, manufacturers and enterprise buyers should identify which products meet the definition, where each model is produced and whether it already holds equipment authorisation. Legal review is essential because production location, model status and conditional approvals can change the result.
Security due diligence should ask:
- where sensor data, maps and diagnostics are processed and retained;
- who can sign and deliver firmware or model updates;
- whether cloud loss leaves the device safe and controllable;
- how local and remote administration is authenticated;
- whether components and software have a documented provenance;
- how vulnerabilities are reported and patches supported;
- whether fleet operators can segment, log and independently disable devices.
Existing authorisation should not be mistaken for a security assessment. Organisations still need to manage deployed robots according to their actual data and physical impact.
A product-security signal beyond the US
The FCC action illustrates how cybersecurity policy is moving from named vendors towards entire connected-device categories. Procurement, trade and security controls are beginning to converge.
Robot makers should expect demands for transparent software provenance, update governance, secure local operation and verifiable supply chains. Buyers should expect regulatory status to become part of lifecycle planning—not a check performed only at import.
The policy’s scope is broad, but its mechanism is specific. Understanding that distinction is the first step towards a proportionate response.
Official sources and further reading
- FCC public notice DA 26-786: foreign-produced advanced robotic devices
- FCC Covered List
- Associated Press: US action on foreign-made humanoid and quadruped robots
This article is general information, not legal or trade-compliance advice.
Continue the series: AMER Cyber & Digital Law Series index
