Noland Arbaugh hadn’t moved his own hands in eight years when, in January 2024, he moved a cursor across a screen using nothing but his thoughts.
Not a joystick. Not a finger. Not a voice command. His mind. The Neuralink implant sitting beneath his skull translated the electrical firing of his neurons into a digital signal, and a computer obeyed. Arbaugh, paralyzed from the shoulders down after a 2019 diving accident, later told reporters it felt like using “the Force.” The footage went viral. The comment sections split instantly between “this is incredible” and “this is terrifying,” and honestly, both reactions are correct.
Here is what nobody was asking in those comment sections: who owns that signal?
The Myth That Started This Conversation
The widely held belief is that brain-computer interfaces (BCIs) are a distant, niche technology for extreme medical cases, nowhere near relevant to ordinary people. That belief is already wrong, and it is becoming more wrong every month.
A 2023 report from the Neurorights Foundation estimated that over 30 consumer neurotechnology companies were actively selling EEG-based headsets to the general public, products marketed for focus, sleep, and stress management, with no medical prescription required. The market was valued at $2.1 billion in 2023 by Grand View Research and is projected to reach $10.5 billion by 2030. This is not a fringe experiment. This is an industry being built around your brain data, right now, while most people are still debating whether their smart speaker is listening to them.
Think of it this way: the smartphone didn’t feel personal until your photos, your location, and your messages were already inside someone else’s server farm. Neural data is moving along the same curve, except the raw material is your cognition.
What Brain-Computer Interfaces Actually Do
Strip away the marketing language and a BCI does one thing: it detects electrical activity in the brain and translates it into a signal a machine can read. Consumer versions (like the Muse headband or Emotiv EPOC) sit on your head and read broad patterns. Implanted versions like Neuralink go deeper, with electrode arrays that can detect individual neuron firing with far greater precision.
I dug into the actual research so you do not have to, and here is what I found: the gap between “detects focus levels” and “decodes specific thoughts” is real, but it is shrinking faster than regulators are moving. A 2023 study published in Nature Neuroscience by researchers at the University of Texas at Austin demonstrated that a non-invasive brain decoder could reconstruct the general meaning of sentences a person was hearing, with no implant required. The decoder still needs training on each individual, but the direction of travel is unmistakable.
The Early Adopters Betting Their Minds on It
Arbaugh is the most visible example, but he is not alone. By mid-2024, Neuralink had received FDA Breakthrough Device designation and was expanding its PRIME Study trial. Synchron, a competing BCI company, had already implanted its Stentrode device in patients in the U.S. and Australia. Blackrock Neurotech reported over 50 implanted patients as of 2024, the largest human implant count of any BCI company at that time.
For people with ALS, locked-in syndrome, or severe paralysis, the risk calculation is different from yours or mine. When the alternative is complete loss of communication, a surgical implant starts to look like a reasonable trade. That context matters, and it’s worth holding onto as we watch this technology migrate from hospital to workplace to living room.
Warning: Consumer EEG headsets sold for “focus” and “wellness” are largely unregulated by the FDA. A 2022 analysis in npj Digital Medicine found that privacy policies for 12 major neurotechnology apps explicitly reserved the right to sell de-identified neural data to third parties. Ask yourself why they do not advertise this part.
What This Means For You Right Now
Here is where the story stops being about Noland Arbaugh and starts being about your inbox on a Tuesday morning.
Several companies are already piloting workplace neurotechnology programs. Emotiv has partnered with enterprise clients to monitor “cognitive load” in workers. The pitch to employers is productivity optimization. The pitch to employees tends to be softer, framed around wellness and personalized workflow tools.
So here is the uncomfortable question: if your employer offered you a $500 bonus to wear a neural monitoring headset for 90 days, would you do it?
Most people reading this probably want to say no. But research on workplace incentive programs suggests that financial bonuses significantly increase participation in health monitoring programs, even when employees report discomfort with the surveillance aspect. The neuro version of this is coming, and it is going to arrive wrapped in a wellness rebate.
Pro Tip: Before enrolling in any employer-sponsored neurotechnology or “cognitive wellness” program, ask HR three specific questions: (1) Who owns the raw neural data collected, (2) Can it be shared with insurers, third-party vendors, or acquirers if the company is sold, and (3) What is the data retention period after you leave the company? Get the answers in writing. If HR cannot answer all three, that is your answer.
The real story behind the headlines is that HIPAA does not automatically protect neural data collected by a consumer device or an employer wellness program. HIPAA covers healthcare providers and their business associates. A third-party headset company is under no such obligation unless it contracts directly with a covered healthcare entity.
The Honest Pros and Cons
The case for taking this seriously:
Medical BCIs are genuinely transformative. The evidence from Arbaugh’s case and from Synchron’s trials shows real restoration of agency for people who had lost it. A 2024 New England Journal of Medicine study on spinal cord stimulation combined with BCI feedback showed meaningful motor recovery in previously paralyzed patients. These are not small gains. These are life-changing outcomes, and dismissing the technology wholesale misses that.
The consumer focus applications also have legitimate use cases for people with ADHD, anxiety disorders, or cognitive rehabilitation needs, provided the data governance actually protects users.
Did You Know: In 2021, Chile became the first country in the world to amend its constitution to include neurorights, protecting mental privacy, cognitive liberty, and mental integrity. Colorado followed in 2024, passing the nation’s first state-level neurorights law explicitly covering neural data. The fact that legislators are moving this fast should tell you the technology is not as distant as you think.
The case for serious skepticism:
The consumer neurotechnology space has almost no standardized data protection, meaningful informed consent frameworks, or long-term safety data, because the devices have not existed long enough to study long-term effects on neural tissue and cognition. We simply do not know what a decade of EEG headset use looks like inside a human brain. That is not a reason to panic. It is a reason to be precise about what you are agreeing to.
The business model question also does not have a clean answer. If you are not paying for the product, your data is the product. That principle, which applies equally to AI-generated media and the platforms that distribute it, is especially sharp when the data in question is your neural activity.
And who benefits from you not knowing this? The companies building proprietary neural datasets right now, before any regulatory framework exists to limit what they can do with them. Convenient timing, right?
The same pattern appears in industries from supply chain to consumer tech: the entities with the data make the rules, until enough people start asking the right questions loudly enough to force a different outcome. The window for asking those questions about neurotechnology is open right now. It will not stay open indefinitely.
Your Next 3 Steps
Step 1 (Do this today): Look up whether your state has passed neurorights legislation. The Neurorights Foundation maintains a current tracker at neurorightsfoundation.org. If your state has no law, note that, because it means any neural data collected on you right now has no explicit state-level protection. Knowing your exposure is not paranoia. It is baseline digital literacy in 2024.
Step 2 (Do this this week): If you own any wearable device marketed around stress, sleep, focus, or mood, open its privacy policy and search for the exact phrase “de-identified data.” If you find it, read the full clause. “De-identified” data can legally be sold to third parties in most jurisdictions, and neural patterns are harder to anonymize than location data because they carry individual cognitive signatures. Also search for “third-party partners” and “business transfer.” The latter clause tells you what happens to your data if the company is acquired.
Step 3 (Your decision framework for the next 12 months): Before accepting any employer wellness program involving a wearable or monitoring device, treat it like a contract negotiation, because it is one. Ask HR the three questions from the Pro Tip box above and get written answers. Then check whether participation is truly voluntary or quietly tied to insurance rates, performance reviews, or team norms. If the program cannot survive those three questions, the same critical framework you would apply to any major financial or lifestyle decision applies here: if you cannot afford to lose it, protect it before you hand it over. Your neural data qualifies.
