The Neuro-Link Protocol

Active audit / neural data / clinical promise versus data extraction

Neural data occupies a distinct category because it sits close to cognition, physical capacity, neurological impairment, fatigue, attention, and task-specific intent-like activity. Even when a system cannot decode free-form thought, it may still classify patterns that become decision-relevant once translated into scores or product metrics.

A disciplined audit separates three layers that are often collapsed into one public story: implanted or endovascular medical neuroprosthetics for severe disability, research-grade decoders proving narrow signal translation under controlled conditions, and consumer or platform neurotechnology operating in a weaker governance environment.

Series Position D09 / 003 of 005 Primary Risk Cognitive Scoring Governance State Patchwork Updated Trigger 2025–2026 clinical and legal developments

Core Finding: The clinical evidence for narrow restorative BCI use is real, and legal recognition of neural data is expanding. The contested zone is the commercial transition: whether neural and neural-adjacent signals remain bounded to therapy or become another analytics layer for institutional scoring.

What This File Tracks

• Most Credible Risk Cognitive scoring from neural or neural-adjacent data, especially attention, fatigue, speech-intent, or engagement signals.
• Governance Gap Device safety frameworks are more developed than durable, cross-jurisdictional neural-data rights.
• Current Update UNESCO adopted a global ethics recommendation in 2025; U.S. state protections expanded; Meta disclosed Brain2Qwerty v2 in June 2026.

I / scope and boundary

Neural data can be generated by measuring activity in the brain or nervous system through invasive cortical recordings, endovascular implants, EEG, MEG, or comparable systems. The decisive issue is not whether the signal is perfect. The issue is whether a measured or inferred cognitive-state signal can be retained, interpreted, sold, or reused outside the purpose that justified collection.

Colorado and California moved first by explicitly naming neural data inside privacy law. By 2025 and 2026, the state-law picture had broadened further, with Montana and Connecticut also adding neural-data or neurotechnology-data protections. That expansion confirms the article’s original premise: older privacy categories were not considered sufficient by lawmakers responding to neurotechnology.

Audit Definition: Neural data means information generated by measuring the activity of a person’s central or peripheral nervous system, including direct brain-interface data and comparable nervous-system measurements used for translation, classification, or behavioral inference.

II / escalation ladder

2021

Regulated BCI Pathway

The FDA issued final guidance for implanted BCI devices for patients with paralysis or amputation, framing the field around non-clinical testing and clinical considerations.

2023

Endovascular Feasibility

The SWITCH study reported safety findings for a fully implanted endovascular BCI in four patients with severe paralysis, supporting the feasibility of thought-controlled digital switch tasks.

2023–2025

Speech Restoration Advances

Peer-reviewed speech neuroprosthesis work showed attempted-speech decoding into text and later real-time voice synthesis under constrained clinical research conditions.

2024–2026

Neural Data Enters Privacy Law

Colorado and California explicitly protected neural data in 2024; Montana and Connecticut followed with broader neural-data or neurotechnology-data protections in 2025, with Connecticut amendments reflected in 2026 guidance.

2026

Non-Invasive Decoding Moves Forward

Meta’s Brain2Qwerty v2 research disclosure reported real-time sentence decoding from MEG recordings, reinforcing both therapeutic potential and data-governance concerns while remaining a controlled research system rather than a general mind-reading product.

Trendline: Therapeutic signal → narrow decoding → platform or product layer → rights conflict.

III / evidence map

Clinical Restoration Is Real

Implanted, endovascular, and cortical-interface systems have demonstrated device control, signal recording, or communication-restoration pathways in clinical and research settings. These systems remain narrow, patient-specific, supervised, and medically justified.

Speech Decoding Is Real But Bounded

Speech neuroprostheses can translate attempted speech into text or synthesized speech in constrained protocols. That is not the same as unrestricted reading of private thought.

Consumer Neurotech Changes Incentives

Outside medical pathways, neural or neural-adjacent signals can be packaged as focus, stress, sleep, fatigue, engagement, or readiness metrics. Even weak signals can become consequential once turned into institutional scores.

Rights Protections Are Fragmented

UNESCO and OECD provide governance direction, and several U.S. states now name neural data, but no uniform federal or global neural-rights regime governs the full consumer and workplace neurotechnology market.

Core Market Risk: Imperfect neural data does not need to be mind-reading to become powerful. It only needs to be converted into confidence scores that employers, insurers, schools, platforms, or public agencies treat as meaningful.

IV / what this file does not claim

Clinical Reality: Current high-performance systems are task-specific and depend on calibration, controlled conditions, patient cooperation, and specialized hardware.

Technical Constraint: Signal portability, long-term stability, generalization across users, and real-world inference reliability remain hard problems.

Governance Risk: Weak or uncertain signals may still cause harm if commercial products present them as objective measures of attention, stress, productivity, intent, or readiness.

Public Correction: The best-supported concern is not that today’s systems read any thought on demand. It is that measured nervous-system activity can become sensitive data before consent, retention, deletion, and purpose limits are settled.

V / evidence ledger

Implanted And Endovascular BCIs Are In Clinical Study

VerifiedFDA guidance, the SWITCH study, Neuralink trial materials, and competitor milestones confirm regulated restorative BCI pathways.

Task-Specific Neural Decoding Produces Useful Outputs

VerifiedPeer-reviewed studies show constrained decoding into cursor control, text, or synthesized speech under research or clinical conditions.

U.S. State Laws Now Explicitly Protect Neural Data

VerifiedColorado and California enacted neural-data protections in 2024; Montana and Connecticut added related protections in 2025, with Connecticut changes reflected in 2026 guidance.

Consumer Neurotech May Enable Cognitive Scoring

ContestedThe risk follows from visible incentives around attention, fatigue, stress, engagement, and productivity metrics, but broad institutional deployment is not yet established as a uniform reality.

A Uniform Neural Data Rights Regime Exists

UnresolvedGovernance remains fragmented across medical-device regulation, privacy law, state statutes, international recommendations, and private-sector terms.