The FCC Drew the Line at 4.4 Pounds and Caught the Robot Vacuum
I think the security case about foreign-made connected devices is real. A camera-equipped, always-on machine that maps the interior of a home and phones a server abroad is a genuine collection platform, and the people who spent a decade warning about this were not being paranoid. I’ve written that a network of them inside government buildings would be an intelligence problem worth acting on.
So I should be the natural audience for the FCC’s new rule. I’m not, because of where the line got drawn.
The ban covers any new ground-based, software-controlled wireless robot over 4.4 pounds. That’s a threshold defined by mass and locomotion. It sweeps in warehouse automation, inspection platforms, delivery machines — and the robot vacuum sitting under the sofa, which is the version of this most Americans will actually encounter.
Ask what the number is measuring
Take the test seriously. What security property changes at 4.4 pounds?
Nothing. A 4-pound device with a camera, a microphone, a floor plan, and an outbound connection is precisely as capable of collection as a 5-pound one. Mass correlates with motor torque and battery size, not with data exfiltration. If the concern is the sensor payload and the network path, the rule should have been written about sensors and network paths, and the fact that it wasn’t tells you the drafters reached for a physical proxy because a functional definition was harder to defend.
Now ask the second question. Who collects the money, and who was this meant to help?
There’s no domestic robot vacuum industry waiting to absorb the demand. The category was built in Shenzhen and the American brand that pioneered it was already losing to it before this rule existed. What the ban produces is a smaller, more expensive market for a household appliance, and a compliance question for every logistics operator who bought a foreign inspection robot last year. The protected party is hypothetical. The paying party is the warehouse.
That’s not a security rule. That’s a tariff with a spectrum authorization attached.
Three regulators, three borrowed instruments
The FCC isn’t alone in improvising this week. The European Commission is preparing to designate ChatGPT and Roblox as very large online platforms under the Digital Services Act, a statute written for social feeds and recommendation algorithms, now being stretched over a chat interface and a game engine. The UK’s Competition and Markets Authority opened a consumer law investigation into Microsoft, on the theory that customers paid more to renew Microsoft 365 after Copilot was bolted on.
Every one of those three is a real problem. And every one is being addressed with a tool built for something else — a radio licensing regime, a platform-liability law, a contract-renewal rule — because nothing purpose-built exists and the agencies aren’t willing to wait for legislatures that show no sign of producing it.
The CMA case is the one I’d defend without reservation. Somebody added a feature nobody asked for and raised the renewal price. That’s a consumer contract question and consumer contract law is exactly the right instrument.
The robot rule is what happens when the same instinct meets a statute that only knows how to ask about radios.
What I still think is true
The underlying threat model holds. I’d support a rule that governed what a connected device may collect, where it may send it, and what audit trail the importer must maintain, applied to every device regardless of origin or weight. I’d support restrictions on foreign-controlled hardware in government facilities and critical infrastructure, and I’d support them without a mass threshold.
None of that is what got written. What got written is a number that a lobbyist could have picked, applied to a category defined by how heavy the thing is.
The vacuum was never the threat. It was just the easiest thing to weigh.