TP-Link makes home/office routers, mesh Wi-Fi, and smart-home devices (Tapo cameras, Kasa) under the operating entity TP-Link Systems Inc., which its own privacy policy and about-us page describe as encompassing 'TP-Link Systems Inc., its subsidiaries, or business units within the TP-Link corporate structure' without naming a single ultimate parent or public ownership chain — consistent with the 2024 corporate split into a nominally US-based systems entity and a China-based TP-Link Corporation. Its privacy policy discloses collection of device/network identifiers (MAC address, access times, location, device/browser/OS info) plus, for camera and voice-enabled products, 'voice input, images, videos, and other personal information' used not only to deliver the requested service but to 'improve our services.' The same policy discloses use of advertising-partner cookies to serve targeted ads and explicitly states this activity 'may be considered "selling" or "sharing"/disclosure of personal data for "targeted advertising" as defined by certain U.S. state laws,' with an opt-out toggle. In 2025, twenty bipartisan U.S. lawmakers sent a letter (published by the House Select Committee on the CCP) asking the administration to investigate TP-Link, whose routers and cameras are sold through US military exchanges, over national-security concerns tied to its Chinese origins; this is a request for investigation, not a completed regulator finding, order, or ban.
TRACK RECORD
1 ENFORCEMENT ACTION
A 2025 bipartisan letter from 20 U.S. lawmakers, published by the House Select Committee on the Strategic Competition Between the United States and the Chinese Communist Party, asked the administration to investigate TP-Link Technologies and determine whether it poses a national-security risk warranting a ban, citing sale of TP-Link routers and cameras through Army, Air Force, and Navy Exchanges near US military installations; this is a request for federal investigation, not a completed finding, order, or ban.
TP-Link's privacy policy discloses collection of device and network identifiers (MAC address, access times, location, device/browser/OS information) for site and service use, and separately states that for its voice-, image-, and camera-enabled products, it uses 'voice input, images, videos, and other personal information' not only to fulfill the user's request but also to 'improve our services' — an open-ended secondary-use clause beyond core function.
TP-Link's own corporate 'About TP-Link' page states the company was founded in 1996 and describes itself as a global provider of networking devices ranked No. 1 in Wi-Fi devices by IDC, without naming a public ownership structure, investor page, or parent-company filing.
TP-Link's privacy policy names the operating entity only in elastic terms as 'TP-Link Systems Inc., its subsidiaries, or business units within the TP-Link corporate structure, as applicable' — a broad legal-entity description that does not disclose a single named parent, jurisdiction of ultimate control, or the post-2024-split corporate structure (US-based Systems entity vs. China-based TP-Link Corporation).
TP-Link's privacy policy explicitly states that its use of advertising-partner cookies for targeted advertising 'may be considered "selling" or "sharing"/disclosure of personal data for "targeted advertising" as defined by certain U.S. state laws,' and offers a toggle-based opt-out for these 'Targeted Advertising and Sale Cookies.'
A 2025 bipartisan letter from 20 U.S. lawmakers, published by the House Select Committee on the Strategic Competition Between the United States and the Chinese Communist Party, asked the administration to investigate TP-Link Technologies and determine whether it poses a national-security risk warranting a ban, citing sale of TP-Link routers and cameras through Army, Air Force, and Navy Exchanges near US military installations; this is a request for federal investigation, not a completed finding, order, or ban.
TP-Link's privacy policy discloses that it allows third-party advertising partners to collect data from its website via cookies and similar technologies to serve targeted ads and support advertising-related analytics such as ad-performance measurement and campaign optimization.