Connecticut Just Added Your Brain to the List of Protected Data

Connecticut's updated data privacy law came into effect on 1 July 2026, and it adds neural data to the state's list of sensitive personal information categories, alongside things like health records and biometric data. It is one of the first explicit moves by a US state to regulate data collected directly from the brain and nervous system.

Why now

Consumer neurotechnology, from meditation headbands to focus-tracking wearables, has moved from niche gadget to mainstream product category faster than most privacy law could keep up with. Connecticut's update is a sign that regulators are starting to treat neural signals with the same seriousness as other deeply personal biometric data, rather than as a novelty data type.

What it means for readers

If you use any consumer device that reads brainwave or nervous system activity, Connecticut residents now have stronger legal grounds to demand disclosure of how that data is collected, used, and shared. For everyone else, it is an early signal of where privacy regulation is heading next: expect more states to follow with similar categories over the next year or two.