Eiliko robot toy routes child conversations to unencrypted Chinese servers

The real issue isn't that Eiliko failed to encrypt data; it's that the liability chain between toy manufacturer, AI backend provider, and end user remains legally undefined when infrastructure spans jurisdictions with incompatible privacy regimes. This creates a gap that regulators can exploit but manufacturers can't easily close without restructuring supply chains.

This connects directly to the multi-state enforcement wave against OpenAI announced last week. Eight state AGs are testing whether consumer protection law can reach AI companies that deprioritize safeguards for margin. Eiliko exposes the same vulnerability at a different layer: a hardware vendor outsourcing AI to cost-optimized Chinese infrastructure, betting regulators won't coordinate fast enough to enforce. The difference is scale and intent. OpenAI is a direct vendor; Eiliko is a supply chain problem that implicates toy manufacturers, cloud providers, and regulators simultaneously. If states win against OpenAI, expect them to use that precedent to pressure hardware OEMs next.

If the FTC or any state AG names the backend AI provider (not just Eiliko) in enforcement action within 90 days, that signals regulators are moving upstream to hold infrastructure vendors liable for downstream product failures. That would force Chinese AI cloud providers to implement Western-grade compliance or lose access to consumer hardware markets.