Two Chicago-based class-action lawsuits have thrust the autonomous delivery sector into a new privacy controversy, alleging that food delivery robot operators Coco and Serve scanned customers' faces and shared biometric data without proper consent. The complaints, reported by local and national media outlets, argue that the companies violated Illinois biometric privacy law by collecting facial information from people interacting with the robots during deliveries.
The allegations arrive at a sensitive moment for a sector that has marketed itself as a futuristic answer to urban logistics, labor shortages and rising delivery costs. Delivery robots have been positioned as efficient, low-emission and consumer-friendly, but the lawsuits suggest that the technology may also be gathering highly sensitive personal data in ways users do not fully understand. If the claims gain traction, they could force operators, investors and municipal partners to reassess how these systems are deployed in public spaces.
Privacy Claims Mount
The core legal issue centers on biometric privacy, a category of law that has taken on outsized importance in Illinois because of the state's Biometric Information Privacy Act, one of the nation's strictest statutes governing the collection and storage of facial geometry, fingerprints and other unique identifiers. Under that law, companies are generally required to obtain informed consent before collecting biometric data and must disclose how such information is stored, used and shared.
According to the lawsuits, the delivery robot companies allegedly used onboard cameras or related systems to identify or scan customers' faces during the delivery process and then transmitted that data to third parties. The plaintiffs contend that this occurred without clear notice or meaningful permission. The companies have not been found liable, and the allegations remain subject to judicial review, but the filing itself underscores how aggressively plaintiffs' lawyers are testing the boundaries of biometric regulation in consumer technology.
For the broader market, the suits are a reminder that the legal exposure around artificial intelligence and computer vision is no longer confined to social media platforms, workplace surveillance tools or airport security systems. Any company using cameras to navigate, authenticate or interact with consumers may now face scrutiny over whether those systems are merely functional or whether they are also harvesting data in ways that trigger privacy obligations.
Market Risk For Robotics
The financial implications extend beyond the courtroom. Delivery robot companies often rely on a narrative of trust: machines that can move through neighborhoods safely, efficiently and with minimal friction. Privacy litigation can quickly erode that trust, especially when the alleged conduct involves facial data, a category of information that consumers tend to view as uniquely sensitive and difficult to replace if compromised.
For investors, the lawsuits highlight a growing due-diligence issue in the robotics and automation space. Startups and growth-stage operators may be able to demonstrate route efficiency, cost savings and customer adoption, but they also need robust compliance frameworks, clear data retention policies and transparent consent mechanisms. Without those safeguards, a promising logistics model can become a legal liability.
The Chicago cases may also influence how cities evaluate permits, pilot programs and public-rights-of-way access for autonomous delivery systems. Municipal officials have generally welcomed innovation that reduces congestion and supports local commerce, but privacy complaints can shift the debate from convenience to oversight. If courts or regulators determine that consumer-facing robots are collecting biometric data, cities may begin demanding stricter disclosure rules before allowing further deployments.
A Wider Regulatory Signal
The lawsuits come as regulators and lawmakers worldwide intensify scrutiny of AI-enabled systems that process images, voices and other personal identifiers. In the United States, the patchwork of state privacy laws is creating uneven obligations for companies operating across jurisdictions, while Illinois remains a particularly high-risk venue because of its established biometric litigation environment.
That makes the Chicago filings potentially significant beyond the local market. Even if the companies deny wrongdoing and ultimately prevail, the case may encourage other plaintiffs to challenge similar technologies in retail, food service, security and transportation. It may also push robotics firms to redesign user interfaces so that consent notices are more prominent and data collection is more narrowly tailored.
For now, the lawsuits represent an early but meaningful warning shot for a sector that has often focused on engineering and economics while treating privacy as a secondary compliance issue. The legal question is no longer whether delivery robots can navigate sidewalks and reach customers. It is whether they can do so without turning routine transactions into biometric data events that consumers never knowingly agreed to.