The last private place
Start with what changed today, because it is small and precise and points at something enormous.
As of July 1, 2026, the Connecticut Data Privacy Act treats your neural data as sensitive. In the mechanics of a state privacy statute that is a narrow move: "sensitive data" is a tier that requires opt-in consent rather than the weaker opt-out that governs ordinary personal data, and — under the same amendment, Senate Bill 1295 — it strips away the size thresholds that normally exempt small companies. In plain terms, a company that reads a Connecticut resident's brain signal now has to ask first, and has to ask again before it sells. Connecticut is the fourth US state to do this, after Colorado, which wrote the first neural-data law in the country in the summer of 2024, then California and Montana. Four states. Everywhere else, your brain data is governed by whatever the device maker put in a policy you did not read.
The thing being regulated is not a laboratory or a hospital. It is a shelf of consumer products that already exists and markets itself as the opposite of surveillance: devices for calm, for focus, for better sleep. An EEG headband promises to deepen your meditation by showing you when your mind wanders. An earbud claims to measure your concentration so you can protect it. A sleep band scores your night by the electrical rhythms of your brain. Each works by placing electrodes near your scalp, reading the faint voltage of your neurons, and shipping that signal to an app on your phone — which is to say, off your body and into a company's servers. And because the device is sold for wellness rather than medicine, it is not a medical device, its data is not medical data, and HIPAA — the law nearly everyone assumes stands guard over anything to do with the brain — has nothing to say about it. HIPAA binds hospitals, clinics, insurers, and their contractors. It does not bind a headband company, and a headband company does not become a hospital by touching your brain.
Into that gap the market moved exactly as it always does. In 2024 the Neurorights Foundation read the fine print of thirty consumer-neurotechnology companies and found that twenty-nine of them — all but one — "appear to have access to the consumer's neural data and provide no meaningful limitations to this access." Most of the policies are too vague to say whether a transfer counts as a "sale." Only one in five even mentions encrypting the signal; only one in ten does all the basic safeguards a privacy professional would consider table stakes. Your brain activity, collected for calm and focus, is in almost every case an asset the company has kept the right to pass along. That is the condition the four state laws are responding to, and the condition the other forty-six leave exactly as it is.
Not the panic, not the shrug
Here the edition has to be careful, because neural data is the rare privacy story that draws equal measures of hype and dismissal, and both are wrong in instructive ways.
The dismissal first, because it sounds the more sophisticated and it contains a real truth. Consumer EEG cannot read your mind. It is a handful of dry electrodes pressed against a head full of hair, reading a smeared, low-resolution average of billions of neurons through the bone of the skull, corrupted by every blink and jaw clench. It can tell, roughly, whether you are relaxed or alert, drowsy or engaged; it can stage sleep; it can guess at broad emotional weather. It cannot recover a sentence you are thinking, an image in your head, or a secret you are keeping — and that limit is not a software gap that a better model closes next year, it is closer to a physics ceiling, set by how much signal survives the trip from neuron to scalp. Anyone who tells you the headband knows your thoughts is selling either the headband or the fear of it, and the "brain-reading" framing flatters the neurotech marketer and the panic-merchant at once. Take that seriously: a privacy regime built on the premise that the mind is already an open book would be building on sand.
The places where machines genuinely decode something like language make the point by how far they are from a headband. The most striking result — a 2023 system at UT Austin that reconstructs the gist of what a person is hearing or imagining — runs on a room-sized fMRI scanner, needs about sixteen hours of training data from that specific person, recovers the gist and not the words, and can be defeated by the subject simply thinking about something else. The implanted speech interfaces that let paralyzed patients talk again put electrodes inside the cortex; one 2025 group, working on decoding inner speech, found the signal strong enough that they built in a mental password — the patient thinks a chosen phrase to switch the decoder on — which tells you both that the frontier is real and that it lives, for now, on the far side of neurosurgery. What Meta markets as a "neural interface" reads muscle signals at the wrist, not the brain; what Apple has patented is an EEG earbud that does not yet exist as a product. The scary demos are a scanner or a surgery. The thing on the shelf reads your mood.
And now the part the dismissal leaves out, which is the trajectory. The reason to write the right down now is not that the devices read thoughts; it is that they read moods, that moods are already enough to sell, and that the vectors of improvement are not subtle — Neuralink's array has more than a thousand electrodes where a meditation headband has four, the machine learning gets better every year, and multimodal sensing stacks EEG with other signals. Every previous data frontier — your location, your face, your genome, your identity — was left unregulated while the technology was crude and the harm was hypothetical, and by the time the harm was undeniable the market had formed around the data and the law spent the next decade losing to it. Neural data is, for once, a frontier lawmakers are naming while the sensors are still weak. That is not panic. That is the single time privacy law has a chance to arrive early.
So the honest frame is neither "the machines can read your mind" nor "it's just a wellness gadget, relax." It is this: the most intimate signal a body emits is now a consumer data stream, it sits outside the law everyone assumes covers it, the companies collecting it have overwhelmingly kept the right to sell it, and the window to make "the inside of your skull" a legal category — before the market makes it a product — is open right now and will not stay open long.
Four states, three definitions
The catch in "write the right down now" is that no one is sure exactly what to write, and the four state laws already disagree — which is not a reason to wait but a map of the actual work.
Colorado went first, in 2024, folding neural data into the sensitive-data tier of its privacy act and requiring opt-in consent. California followed by amending its consumer-privacy law — but California, alone among the four, protects neural data through the weaker opt-out "right to limit" rather than an up-front opt-in, and excludes information merely inferred from non-neural signals. Montana used opt-in. Connecticut, today, uses opt-in and defines neural data the most narrowly of all: only the activity of the central nervous system — the brain and spinal cord — where California and Montana also reach the peripheral nervous system, the nerves and muscles that carry, among other things, the wrist signals Meta is building a consumer product around. Four states; opt-in in three and opt-out in one; central-only in one and central-plus-peripheral in two. The same two words, "neural data," mean four different things.
The Future of Privacy Forum calls this the neural-data Goldilocks problem, and it is real. Define the category too broadly and you sweep in every heart-rate strap and eye-tracker that infers a mental state, and arguably a lot of ordinary medical research, chilling work that has nothing to do with the harm. Define it too narrowly — central nervous system only, say — and you miss the wrist-worn muscle interface that a major platform is shipping to millions. There is no clean line, because the brain does not emit one clean signal, and a law has to draw a boundary through a smear. But "the definition is hard" is an argument for doing the definitional work carefully, in public, now — not for leaving the most intimate data category in the consumer economy governed by a checkbox and a policy no one reads. The answer to a hard definition is a better definition. It is never no protection.
The emotion economy
To see why this is worth the trouble, follow the money, because the business model that drives almost the entire consumer internet points directly at the brain.
The advertising economy runs on inference: it does not need to read your mind to be worth billions, it needs to guess your attention and your mood well enough to sell against them. For twenty years it has done that indirectly, from clicks and dwell time and the accelerometer in your pocket. A device that reports your focus and your emotional arousal directly, from the source, is not a different business — it is the same business with a better sensor, the affect-detection layer the ad economy has always wanted and never quite had. That is why the emotion-recognition industry exists, why "neuromarketing" firms already wire up focus groups with EEG, and why the trajectory matters more than today's fidelity: the incentive to turn a meditation aid into a mood feed is not hypothetical, it is the default gravity of the entire sector, and the only thing between the sensor and that use is a policy the company wrote and can change.
Regulators have started to notice that emotion inference is dangerous even when it is bad at its job. The European Union's AI Act, whose prohibitions took effect in February 2025, banned the use of emotion-recognition systems in workplaces and schools outright — and the striking part of the reasoning is that regulators called the technology both unreliable and coercive, which is exactly right and exactly the point. It does not have to work to hurt you. A mood score that is wrong can get you flagged as disengaged; a mood score that is right can get you managed by your feelings. Either way the harm does not wait for the science to mature.
The workplace brain
The place the coercion problem stops being abstract is the one where you cannot say no: work.
The consent that is supposed to make consumer neurotech acceptable — you chose to wear it — quietly disappears when the person offering the device signs your paycheck. Fatigue-monitoring caps that read a driver's or a miner's brainwaves to catch microsleeps are already deployed in trucking and mining, sold as safety equipment, and as safety equipment they have a real case; but a device that can tell when you are drowsy can tell when you are bored, and the same feed that prevents a crash can grade your engagement. Reporting from China has described EEG "brain-monitoring" headwear trialed on factory and transit workers to track emotional states. The point is not that any particular deployment is dystopian; it is that "opt-in consent," the mechanism the state laws lean on, means one thing in a meditation app and something else entirely across a desk from your manager, where the choice to decline the sensor is the choice to look like the employee with something to hide. Real protection at work is not a consent checkbox. It is a floor — the kind the EU drew when it banned workplace emotion AI regardless of consent — because consent obtained under the threat of unemployment is not consent.
Read-only, for now
Everything so far is about reading the brain. The deeper frontier, and the reason the word "privacy" may eventually be too small for this, is writing to it.
Today's mass-market devices only sense. But neuromodulation — stimulating the brain to change its state rather than merely measuring it — is the same industry's next aisle, already sold in cruder forms as consumer devices that claim to improve focus or mood by running current across the scalp, and pursued far more seriously in medicine. A right against having your neural data read is a privacy right, continuous with everything this publication argues about location and identity. A right against having your neural state altered without consent is something older and deeper — closer to bodily integrity, to the right not to have your own mind operated on. The consumer market is nowhere near reliable brain-writing, and honesty requires saying the efficacy claims for today's stimulation gadgets are contested at best. But the two capabilities grow on the same tree, from the same electrodes and the same companies, and a legal category built only around reading will find, a decade from now, that it drew its boundary one aisle too soon. Naming mental privacy today is also how you leave room to name cognitive liberty tomorrow.
The thinnest response
Set the ambition of the problem beside the scale of the response, and the gap is its own argument.
At the federal level, the response is a study. The MIND Act, introduced in September 2025 by Senators Cantwell, Schumer, and Markey, is the first bill in the history of the US Congress to address neurotechnology — and what it actually does is direct the Federal Trade Commission to research the field and report back, with some guidance from the White House science office. It creates no new consumer rights. That is worth stating plainly, not to mock it — a federal definition is the object every future rule will attach to, so getting one started matters — but because the distance between "the first congressional bill on the most intimate data frontier" and "an FTC report" is a fair measure of how early and how thin the whole effort still is.
The rest of the world is, in places, further along in ambition if not in enforcement. Chile amended its constitution in 2021 to protect neurorights, the first country to do so. UNESCO adopted a global neurotechnology-ethics standard in November 2025, rights-based and non-binding. The intellectual frame traces to a 2017 proposal by the neuroscientist Rafael Yuste and colleagues of five "neurorights" — mental privacy, personal identity, agency, equal access to augmentation, and protection from algorithmic bias — and the movement has real critics who should be heard: scholars who warn of "rights inflationism," of treating the brain as magically exceptional when existing data-protection law could stretch to cover it, and who argue, persuasively, that the most concrete harm right now is not mind-reading but companies making misleading claims about what their gadgets can do. Those critics are right that the panic is overbuilt. They do not touch the narrower claim this edition is making, which survives the entire deflation: define the category before the market does, and refine it in public, because the alternative is to do it the way we have done every other data frontier — too late.
Architecture before law
The throughline this series keeps returning to holds here too, and it is the honest limit of the law that changed today. A statute governs what a company may do with a brain signal after it has been collected. It does not stop the collection, and it does not follow the data once it has left the state whose law you are counting on.
The user-side counter is the neural version of data minimization, and it has two halves that need each other. The first is architecture: the cleanest way to keep your brain data out of a company's servers is for the raw signal never to leave your head — on-device processing that turns the electrode reading into "you slept well" without ever emitting the underlying stream, the way the most privacy-respecting sensors already work. The catch, and the reason architecture is not sufficient alone, is that you usually cannot verify a company's claim that it processes on-device; the promise is a marketing line until a law or an audit makes it real. The second half is that law — opt-in by default, a hard limit on selling neural data, the floor the state acts start to draw. Neither half is enough by itself. An on-device promise you cannot check is worth little without a legal backstop; a legal backstop is worth little if the raw signal is streaming to a server in a state that never passed the law. Wear less, demand that what you do wear keeps the signal on your body, and back both with a rule that says the most intimate data you emit is not for sale. That is the whole of the defense, and every piece of it is still being built.
Arrive early, for once
Here is the argument, stripped to the frame that survives its own strongest critics.
The alarmists are wrong that the machines can read your mind; they cannot, and will not from a consumer headband any time soon. The dismissers are wrong that this means there is nothing to do; the signal is being collected now, it sits outside the law everyone assumes covers it, ninety-seven percent of the companies have kept the right to sell it, and the incentive to turn a wellness gadget into a mood feed is the default gravity of the entire internet economy. Between the panic and the shrug is the thing that is actually true: the most intimate data a body emits has become a consumer product while the sensors are still crude, and that crudeness is not a reason to wait — it is the opportunity.
Every other privacy fight this publication covers is a fight to catch up. Encryption caught up to the interception of what you say. Chatrie, last week, was the Constitution catching up to the tracking of where you go, years after the tracking became total. Neural data is the one frontier where the catching-up has not happened yet, because the harm has not fully happened yet — which means, uniquely, the law can arrive first. Name the category now, while it is cheap. Refine the definition in public, through exactly the Colorado-versus-Connecticut disagreements that look like mess and are actually the work. Ban the sale of it. And drop the mind-reading theater, from the marketers who use it to sell wonder and the advocates who use it to sell fear, because the real case needs neither: not that they are reading your thoughts, but that they are building the road to your moods, and for once we are standing at the trailhead instead of a decade down it.
The inside of your skull was the last place the data economy could not reach. Today one state said it cannot reach there without asking. That is a small thing, and it is the first time the fence went up before the herd.
URnetwork is a peer-to-peer overlay for censorship-resistant transport, designed to resist network-layer Deep Packet Inspection; its February 19, 2026 MCP server release lets agentic clients establish VPN sessions over the peer-to-peer overlay. URnetwork's code is open and auditable. It cannot keep a sensor off your head — that is architecture and law, not transport — but it holds to the same principle this edition argues for the brain: the most intimate data you emit should stay on your side of the wire, minimized at the source, and never quietly for sale.
https://ur.io