- No international model law exists for neurotechnology and neurodata, raising privacy concerns.1
- The regulatory gap is decision-relevant for compliance and product roadmaps.1
- International alignment on neurodata privacy remains lacking.1 1
Weekly enrichment (2026-07-20)
- JURIST reports that UN Special Rapporteur on the right to privacy Ana Brian Nougrères called in October 2025 for the development of a model law on neurotechnologies and neurodata, presenting foundations and principles in a report to the Human Rights Council in Geneva.2
- The report makes four recommendations to states: create a dedicated regulatory framework for neurotechnologies and neurodata; incorporate established privacy principles into national law; promote ethical practices to address innovation risks; and promote education to ensure informed consent.2
- Its guiding principles are protection of human dignity, protection of mental privacy, recognition of neurodata as highly sensitive personal data, and a requirement of informed consent for processing, with the precautionary principle applied to serious risks to fundamental rights.3
- As of the report, most countries had not legislated neuro-rights or neurodata protections; Chile became the first country to pass a neuro-rights law in 2021.2
- UNESCO’s General Conference adopted the Recommendation on the Ethics of Neurotechnology on 12 November 2025 at its 43rd session — the first attempt at a global framework for the ethical development and use of neurotechnology, endorsed by its 194 member states though not legally binding.4 5
- The UNESCO text urges member states to treat neural data as well as indirect and non-neural data allowing mental-state inferences as sensitive personal data, to prohibit tying access to goods or services to disclosure of such data, to require explicit opt-in for sharing, and to forbid its use for targeted advertising without prior free and informed consent.4
- Analysts note the recommendation could seed future binding legislation or support enforcement under existing laws such as the GDPR, paralleling how UNESCO’s 2021 AI ethics recommendation helped inspire the EU AI Act.5
- Existing international frameworks for neurotechnology are described as “exclusively soft law,” and five expert-backed neurorights — agency, identity, mental privacy, equal access to mental augmentation, and protection from algorithmic bias — recur across the OECD Recommendations, the Inter-American Juridical Committee declaration, Chile’s constitutional amendment, and Spain’s Digital Rights Charter.6
- Scholarship on Chile’s Law No. 21.383 (2021) finds that constitutional recognition alone produced a “Rights-Without-Infrastructure Syndrome,” with enforcement gaps persisting where implementing legislation, designated oversight, and adaptive technical standards are missing.7
- Commentators emphasize that because neurotechnologies transcend borders, international harmonization is deemed indispensable to avoid fragmented rules and forum-shopping; today the GDPR applies to neurodata processing but no international or supranational regulation specifically addresses neurodata.2 3
Footnotes
-
https://news.google.com/rss/articles/CBMixAFBVV95cUxNeDJEZU9oMEtIQklxcFFsRDZZTERYZ2R4NTRpWXllcnN6eWhVMmhubTh6cmJzU05KUlBJeGt2Zng0R3l5b2RrT3J1Qkl0S21uZWVtWl92U2dEd3VIMnBGdUJTNDN6dktNMDR6aThNWjdfTTdMdTBwUzVzaExxWVBfVnl4dTItYi1vZ1VaeG9EVklPNzBaUEVUVERVcGpwcEY3VFhibmtsSlpXUXROaEVyd0VFYjF0cUo0bVZxdnZMYjZicERk?oc=5 ↩ ↩2 ↩3 ↩4
-
https://www.jurist.org/news/2025/10/lack-of-international-model-law-for-neurotechnology-and-neurodata-raises-privacy-concerns/ ↩ ↩2 ↩3 ↩4
-
https://www.ohchr.org/sites/default/files/documents/issues/privacy/srprivacy/statements/un-srp-id-statement-21-10-2025-pdf.pdf ↩ ↩2
-
https://www.unesco.org/en/legal-affairs/recommendation-ethics-neurotechnology ↩ ↩2
-
https://www.insideprivacy.com/health-privacy/unesco-adopts-first-global-framework-on-neurotechnology-ethics/ ↩ ↩2
-
https://ntc.columbia.edu/wp-content/uploads/2022/05/NeurorightsFoundationPUBLICAnalysis5.6.22.pdf ↩