The neurorights proposal and the debate
The most prominent governance idea is neurorights: the proposal that the challenges of neurotechnology warrant a small set of new (or newly explicit) human rights. The commonly cited candidates are mental privacy, mental integrity (protection from unauthorised alteration of neural activity), cognitive liberty (freedom to control one's own mental states, including the right to use or refuse neurotech), and psychological continuity / personal identity. Some formulations add fair access to neuro-enhancement to keep the frame from being purely defensive.
The debate is genuine and worth holding in your head. Proponents argue existing rights (privacy, bodily integrity, freedom of thought) were not written with brain-reading and brain-writing in mind and leave gaps that explicit neurorights would close. Skeptics reply that rights inflation dilutes the concept, that most concrete harms are already covered by data-protection, medical-device, and consumer law properly applied, and that vague new rights may be hard to adjudicate. A defensible position: the interests neurorights name are real and urgent; whether they are best protected by new constitutional rights, by strengthened existing law, or by sector regulation is an open, jurisdiction-dependent design choice.
What laws already exist
This is no longer purely theoretical. Chile amended its constitution to protect mental integrity and brain activity and passed accompanying legislation, becoming the first country to enshrine neurorights at constitutional level. In the United States, several states have moved via consumer-data law — extending existing privacy statutes so that 'neural data' is treated as sensitive personal information, with the aim of reaching consumer neurotech that sits outside medical regulation. At the international level, UNESCO has advanced a recommendation on the ethics of neurotechnology to shape norms across member states.
Consumer versus medical: the regulatory gap
The sharpest practical gap is between medical and consumer neurotech. An implanted clinical BCI faces heavy oversight — trials, device regulation, ethics review (the Clinical Translation track's whole world). A consumer EEG headband marketed for 'focus' or 'meditation' can often ship with none of that, yet it still collects neural data, often to cloud servers, under a click-through agreement few read. The very asymmetry Guide 1 flagged — reading looks harmless, so it is regulated lightly — is where the largest volume of neural data is quietly being amassed.
This is why the consumer-data laws above matter more than they first appear: they are an attempt to regulate by the nature of the data rather than the classification of the device, closing the gap from the other side. It is also why 'it's only EEG, it can't read thoughts' (true, per Guide 2) is not a complete defence: the harm is not sci-fi mind-reading but the routine, cumulative, weakly-governed collection of an intimate signal by parties with commercial incentives.
Dual-use, neurosecurity and equity
Three cross-cutting concerns close the governance picture. Dual-use: technology built to restore function can be repurposed — to interrogate, to manipulate, to enhance for competitive advantage, or to weaponise. Governance must anticipate misuse of benign tools, as it does for other dual-use sciences. Neurosecurity: an implant is a networked computer inside a person; it can be hacked, its data exfiltrated, its stimulation tampered with. Security here is not just IT hygiene — a compromised writing-capable device is a threat to bodily and mental integrity, raising the stakes above ordinary cybersecurity.
Equity: who gets these benefits? Clinical BCIs are expensive, surgeon- and center-dependent, and unevenly reimbursed, so without deliberate policy they risk becoming a therapy for the few. And if enhancement-grade neurotech ever arrives, unequal access could translate directly into unequal cognitive advantage — a justice problem with few precedents. Equity is not a soft add-on to governance; it determines whether the whole enterprise widens human capability or entrenches existing divides.
Open problems and how to think about them
Governance here is a moving target, and honesty means naming what is unsettled rather than pretending to answers. Several problems are genuinely open: how to define 'neural data' in law without either under-covering (missing derived inferences) or over-covering (sweeping in ordinary physiology); how to regulate adaptive, learning devices whose behaviour changes after approval; how to keep pace when technology outruns legislative cycles; and whether harmonised international norms are achievable across very different legal and cultural systems.
That is the closing thesis of the whole track, and of the volume's ethical arc. The hardest questions BCI raises — who may read your mind, who authored your action, who you become, and who governs it all — do not have final answers you can memorise. What you can carry is a method: name the specific capability, turn each worry into a checkable requirement, and build systems that are governable by design. The engineer who does that is not waiting for the ethicists; they are doing the ethics.