Info Gov

Brain data should receive stronger legal protections than other forms of personal data, according to a Citizens’ Jury established as part of research commissioned by the Information Commissioner’s Office (ICO).

A report on the project’s findings also found that the jury – made up of 20 members of the public – backed tighter restrictions on how such data can be collected and used.

Neurotechnology, also known as neurotech, is broadly defined in the report as devices that can record and/or send electrical signals to the brain and nervous system.

The information watchdog commissioned the research, which was carried out by the Centre for Collective Intelligence, in light of developments in the sector which have seen the technology extend beyond healthcare into more consumer-facing applications.

According to the report, most jurors were enthusiastic about the technology’s potential, particularly for medical uses like Parkinson’s treatment, cochlear implants, and managing conditions like ADHD or dementia.

But this support was contingent on there being “robust” data security and privacy rules in place, it said.

Jurors raised concerns that highly sensitive, intimate neurodata could be hacked by malicious actors or used by commercial entities for targeted marketing.

In light of these concerns, the jurors supported clear regulatory standards to build public confidence – and a new legal category.

A new legal category for brain data should be introduced to account for the difference, and mitigate the risk of exploitation of legal loopholes by commercial actors, according to the jury.

Desired new regulatory standards included restrictions on neurodata collection from children or vulnerable people, restrictions on uses of neurodata for marketing or access to services, and stricter regulations for ‘read-write’ devices.

Jurors concluded that brain data is “fundamentally different” from other forms of personal data, as it inherently captures subconscious thoughts and intentions that individuals cannot fully control.

The jury met over three online sessions which involved informational videos, specialist input and discussions guided by expert facilitators.

Also in this section

Oct 14, 2026

ICO reprimands Met Police over unlawful data sharing

The Metropolitan Police Service (MPS) has been reprimanded by the Information Commission’s Office (ICO) after officers and staff unlawfully shared personal information through an unapproved third-party platform used to identify suspected shoplifters.
Oct 02, 2026

Campaigners invoke UK GDPR to challenge NHS Palantir platform

Campaign group 38 Degrees has coordinated legal objections from more than 44,000 people asking NHS England to stop the Federated Data Platform (FDP), which runs on Palantir software, from sharing, storing or using their health records, the Guardian has reported.
Sep 28, 2026

NHS staff suspended or removed from duty over access to Noah Woods' medical records

East Suffolk and North Essex NHS Foundation Trust (ESNEFT) has suspended or removed from active duty ten members of staff and reported itself to the Information Commissioner's Office after concerns that the medical records of three-year-old Noah Woods were viewed without a legitimate clinical reason following his disappearance.

InfoGov Masthead Newsletter 800