New Research Brief Evaluates the Effectiveness of GDPR in Mitigating Risks Associated with the Distinctive Nature of Neurodata

21 January 2025

Advances in neurotechnology (NT) have driven the growing collection and processing of neurodata – data related to the structure and functioning of the human brain – across various societal domains. The development and use of NTs heavily depend on neurodata to ensure device functionality (e.g., neurofeedback monitors or brain-computer interfaces) and to enhance performance by refining AI algorithms integrated into these devices.

In our new Research Brief, ‘Neurodata: Navigating GDPR and AI Act Compliance in the Context of Neurotechnology’, Timo Istace highlights the delicate balance needed between leveraging neurodata for progress and protecting individual rights. He notes that ‘the indispensability of neurodata to fuelling progress in the sector needs to be balanced against the risks to individual users. Neurodata is a highly sensitive and personal form of data, akin to genetic data. Its combined features – including its informational richness (extending to cognitive processes), predictive potential, and risk of involuntary disclosure – warrant significant scrutiny to preserve individuals’ privacy, particularly mental privacy.’

Timo further explains, ‘Data protection regulations are crucial in addressing these concerns. The sensitive nature of neurodata raises questions around whether current regulatory frameworks offer adequate protection against incursions on mental privacy and the safeguarding of neurodata. While no supranational regulation specifically addresses neurodata, regional instruments like the EU’s General Data Protection Regulation (2018) provide a framework for assessing protection measures.’

This paper evaluates the effectiveness of the GDPR in mitigating risks associated with the distinctive nature of neurodata, with the goal of safeguarding neuroprivacy and mental privacy in the context of emerging NTs. It analyzes the scope and applicability of the GDPR, examines the challenges of ensuring robust protection during the collection, processing, storage, and transfer of neurodata, and considers how the recent EU AI Act might complement or reinforce GDPR safeguards.

MORE ON THIS THEMATIC AREA

Human Rights Tiles News

From Signals to Action: Strengthening the UN's Conflict Prevention Efforts

31 March 2025

Our recent research brief series explores how the United Nations' human rights system can enhance its role in early warning and conflict prevention.

Read more

neurotech image News

Research Brief Evaluates the Human Rights Implications of Neurotechnology in Therapeutic and Commercial Applications

27 March 2025

Our research brief, Neurotechnology and Human Rights: An Audit of Risks, Regulatory Challenges, and Opportunities, examines the human rights implications of neurotechnology in both therapeutic and commercial applications.

Read more

Special Rapporteur Sign Event

Economic, Social and Cultural Rights in an Era of Escalating Armed Conflict: Where Can International Human Rights Law Help?

25 September 2025, 18:30-20:00

This evening dialogue will present the publication: International Human Rights Law: A Treatise, Cambridge University Press (2025).

Read more

Enforced Disappearances Event

'Short-term' Enforced Disappearances

23 September 2025, 13:00-14:00

This side event will bring together stakeholders to discuss the growing concerning recurrence to short-term enforced disappearances worldwide, and the challenges they pose for victims and accountability.

Read more

Town Hall Meeting Training

Localizing International Human Rights

8-10 October 2025

This training course, specifically designed for staff of city and regional governments, will explore the means and mechanisms through which local and regional governments can interact with and integrate the recommendations of international human rights bodies in their concrete work at the local level.

Read more

Un plate with Rapporteur Spécial written on it Project

Support to UN Special Procedures

Started in June 2020

Read more

Sign: National Human Rights Commission of Nepal Project

Local Implementation of Global Human Rights

Started in May 2020

The Geneva Human Rights Platform collaborates with a series of actors to reflect on the implementation of international human rights norms at the local level and propose solutions to improve uptake of recommendations and decisions taken by Geneva-based human rights bodies at the local level.

Read more

Cover of the 2023 Geneva Academy Annual Report Publication

Annual Report 2024

published on July 2025

Read more