Neurorights and the Ethics of Reading the Brain
BCIs raise unprecedented questions about mental privacy, cognitive liberty, and personal identity — questions law and norms are only beginning to confront, and that consumer neurotech is making urgent.
Key facts
- Chile constitutionally protected neurorights in 2021 — a global first.
- UNESCO adopted a Recommendation on the Ethics of Neurotechnology (2025).
- Colorado (2024) and California (2024) became the first US states to classify neural data as sensitive personal information.
- Multiple peer-reviewed reports document personality changes after DBS in a minority of patients.
- Yuste's five neurorights are the dominant policy framework worldwide.
The Neurorights Framework
Rafael Yuste and colleagues at the NeuroRights Foundation propose five neurorights: personal identity, agency, mental privacy, fair access to mental augmentation, and protection from algorithmic bias.
Chile became the first country to constitutionally protect neurorights in 2021; Spain, Mexico, and Brazil are advancing analogous legislation. UNESCO adopted a global recommendation on neurotechnology ethics in 2025.
Mental Privacy
Even crude consumer EEG (Muse, Emotiv, Neurable) can reveal medical conditions, affect, and intentions. As decoders improve, the technical possibility of involuntary brain reading becomes a regulatory question.
US state-level neural-data privacy laws — Colorado (2024) and California (2024) — have begun to classify brain data as sensitive personal information.
Identity and Agency
Closed-loop stimulation that modulates mood or behavior raises identity-altering possibilities and complicates legal notions of responsibility, consent, and authenticity of action.
Documented cases of DBS-induced personality change, while rare, are reshaping informed-consent practice.
Equity and Access
Implanted BCIs cost hundreds of thousands of dollars. Access depends on insurance, geography, and surgical infrastructure — risking a sharp 'neuro-divide' if therapies become enhancements.
Global coordination — WHO, UNESCO, OECD — aims to set minimum norms before consumer neurotech proliferates.
Workplace and Consumer Neurotech
Employer-mandated EEG headbands in trucking and mining raise consent and surveillance concerns now, not in the future.
Italy's data-protection authority and Chile's regulator have already acted against specific consumer-neurotech deployments.
Frequently asked
Can my brain be hacked?
+
Highly invasive implanted systems with wireless interfaces are theoretically attackable, and security research has demonstrated vulnerabilities. Non-invasive consumer devices already raise serious data-privacy concerns.
Do I own my brain data?
+
Increasingly yes by law — Colorado and California now classify neural data as sensitive personal information. Federal US law and most jurisdictions remain incomplete.
Can BCI data be subpoenaed?
+
Yes, in principle. The legal frontier is unsettled and varies by jurisdiction; some neurorights frameworks aim to give brain data special protection.
Sources & further reading
Continue in this series
Foundations
Brain-Computer Interfaces: An Overview
Industry
Neuralink, Synchron, and the BCI Industry
Therapeutics
Neural Implants and Stimulation
Frontier
Memory Prosthetics and Cognitive Augmentation
Outlook
The Future of Brain-Computer Interfaces