Cybersecurity and privacy for co-creative robotics: protecting trust without constraining creative autonomy

Co-Creative Robotics combines computational creativity, robotic embodiment, and human–robot collaboration to support or generate creative behavior in physical and social environments. As these systems become more autonomous, data-intensive, and interactive, cybersecurity and privacy can no longer be treated as external safeguards added after creative functionality has been designed. This PRISMA-informed review investigates whether principles of cybersecurity-by-design and privacy-by-design can be integrated into Co-Creative Robotics without constraining creativity, autonomy, and user agency. The database search covered ACM Digital Library, Google Scholar, IEEE Xplore, Scopus, SpringerLink, and Web of Science, and was complemented by two focused backward and forward snowballing iterations. From 623 database records, the final synthesis includes 27 primary studies. The results show that direct literature combining cybersecurity, privacy, and Co-Creative Robotics remains limited, but evidence from creative HRI, social-robot privacy, cyber-physical security, privacy-preserving interaction design, security modeling, and robot ethics supports a conditional answer. Integration is feasible when security and privacy mechanisms are adaptive, explainable, participatory, context-sensitive, and lifecycle-aware. However, the evidence on transparency-oriented privacy mechanisms is mixed: improvements in awareness or acceptance do not consistently translate into reduced disclosure or greater perceived safety. Rigid controls may constrain creative exploration, whereas well-designed controls can support trust, accountable autonomy, safe embodiment, privacy-aware interaction, provenance, and agency-preserving creativity. The review proposes a conceptual lifecycle-oriented research agenda for secure and privacy-aware Co-Creative Robotics.