Statutory categorization of raw and processed brainwave telemetry (EEG, fNIRS, ECoG) as protected sensitive biological data requiring explicit affirmative consent.
Enacted in 2024, Colorado HB 24-1058 expanded the Colorado Privacy Act to classify biological data—specifically neural data generated by the measurement of an individual's central or peripheral nervous system—as protected sensitive data. Commercial neurotechnology vendors must provide clear privacy notices, implement consumer consent mechanisms, and restrict data monetization.