Policy & Regulation

39 articles

Policy & Regulation

Cambridge-led security team names five attack families that break AI-powered brain-computer interfaces

A team led by Zahra Tarkhani (Microsoft), Georgios Akkogiounoglou (KTH Royal Institute of Technology), Lorena Qendro (Nokia Bell Labs), Isabel Tscherniak (TU Munich), and senior author Anil Madhavapeddy (University of Cambridge) published NERVE Attacks: Breaking AI-Powered Brain-Computer Interfaces on arXiv on 8 September 2026. The paper introduces a taxonomy of five attack families that together span the complete BCI signal chain: Neuro-mimetic Forgery, Evasion via Desynchronization, Replay-based Hijacking, Vein Tapping, and Embedded Backdoors. It releases EEGle, an AI-assisted extensible framework for systematic BCI security analysis, and reports 17 novel neuro-specific attack instances plus a stealth-effectiveness spectrum for BCI backdoor design. The submission lands four days after Germany's outgoing federal data protection commissioner used the BfDI's annual Bonn conference on 4 September 2026 to press for tighter European handling of neurodata, and one day after four senior clinician-scientists published a Comment in Nature Neuroscience setting out four ethical priorities for implantable BCI research. The empirical attack surface has now caught up with the governance framing.

Sep 13

Policy & Regulation

Plexon settles $1.7M US export case for shipping brain-recording equipment to China's People's Liberation Army

The US Department of Commerce Bureau of Industry and Security (BIS) announced on 14 August 2026 an administrative enforcement settlement with Dallas, Texas neural-instrumentation maker Plexon, Inc. over eight unlicensed exports between 10 February 2022 and 30 August 2023 to the Academy of Military Medical Sciences (AMMS), the People's Liberation Army's biomedical research arm and a party on the BIS Entity List since December 2021. The shipments comprised eight OmniPlex Neural Recording Data Acquisition Systems and accessories, valued at approximately US$178,721. The civil penalty is US$1.7 million, suspended in full for five years contingent on Plexon completing an external export-compliance audit and committing no further violations. AMMS was added to the Entity List in part for supporting Chinese military end uses including 'purported brain-control weaponry.' The settlement is the first BIS enforcement action publicly involving commercial brain-computer interface research instrumentation, and lands eight years after BIS's November 2018 emerging-technology framework flagged BCI and AI for brain modeling as candidate export-control categories.

Sep 11

Policy & Regulation

Four senior BCI neurosurgeon-scientists use Nature Neuroscience to press for tighter research ethics as implant numbers scale

Four clinician-scientists from Mayo Clinic, University College London, and Sichuan University published a Comment in Nature Neuroscience on 7 September 2026 setting out four ethical priorities for implantable brain-computer interface research: separating research participation from patient care, ensuring long-term support for study participants, avoiding disproportionate risks to participants for benefits realised mainly by others, and grounding research in meaningful clinical purpose. Lead author Kai J. Miller (Mayo Clinic) is the corresponding author. Senior author Gerwin Schalk (West China Hospital, Sichuan University) is the second corresponding author. Co-author Harith Akram (UCL Queen Square) declares a conflict of interest as Chief Investigator of Neuralink's GB-PRIME UK study. The Comment lands one day after Germany's outgoing federal data protection commissioner pressed Europe for tighter rules on bidirectional BCI, and ten months after UNESCO's General Conference adopted the first global standard on the ethics of neurotechnology in November 2025.

Sep 8

Policy & Regulation

Germany's data protection commissioner presses Europe for tighter rules on bidirectional brain-computer interfaces

Prof. Dr. Louisa Specht-Riemenschneider, the outgoing German Federal Data Protection and Freedom of Information Commissioner (BfDI), used a BCI-themed academic conference at the University of Bonn on 4 September 2026 to press for tighter European handling of neural data. Her formal underpinning is a Berlin Group Working Paper on Emerging Neurotechnologies published on 15 May 2025 through BfDI, which invokes GDPR Article 9 (health and biometric data) and the EU AI Act (Article 5 subliminal-manipulation ban, Annex III high-risk classification for medical BCI) as existing legal ground. The intervention lands one month before Specht-Riemenschneider steps down for health reasons on 30 September 2026. Her Bundestag-elected successor Prof. Dr. Moritz Hennemann of Freiburg takes office on 1 October 2026, and his own position on neurodata is not publicly disclosed.

Sep 6

Policy & Regulation

India's DPDPA treats brain signals like a shopping cart, a legal scholar argues

In a LiveLaw analysis published 30 August 2026, CHRIST University Assistant Professor Namit Srivastava argues that India's Digital Personal Data Protection Act 2023 applies the same consent framework to neural data as it applies to a shopping cart, and that MeitY should add neural data as a sensitive category via delegated rule-making under Section 40 without reopening the Act. The piece is legal-scholar analysis, not Indian government policy. It lands two days after the 28 August ADI Neuroscience US$1 billion India neurotech fund announcement.

Aug 30

Policy & Regulation

China puts brain-computer interfaces on the 15th Five-Year Plan 'future industry' list

China's Ministry of Industry and Information Technology named brain-computer interfaces among six future industries in a State Council Information Office press conference on 26 August 2026, alongside quantum technology, biomanufacturing, hydrogen and nuclear fusion energy, embodied intelligence, and 6G. Retail News Asia reports MIIT's draft standards roadmap targets more than 40 BCI national standards by 2028 and more than 80 brain-tech standards by 2030, though the specific count is single-sourced and should be attributed accordingly.

Aug 27

Policy & Regulation

Türkiye's NOROM joins NATO's DIANA test network as an alliance-tier neurotechnology centre

Türkiye's Council of Higher Education announced on 23 August 2026 that the Neuroscience and Neurotechnology Center of Excellence Joint Application and Research Center (NOROM) has been admitted to NATO's Defence Innovation Accelerator for the North Atlantic (DIANA) test network. NOROM is a joint centre between Gazi University, Ankara University and Middle East Technical University (METU), founded in 2023. Scope covers brain-computer interfaces, cognitive performance assessment, brain imaging, neuromodulation, robotic systems, and AI-assisted signal analysis. It is Türkiye's first and only DIANA test centre in the fields of neuroscience and neurotechnology.

Aug 24

Policy & Regulation

The White House re-shelved brain-computer interfaces under 'Future Computing'

The Office of Science and Technology Policy released its National Security Science and Technology Strategy on 19 August 2026, narrowing the Critical and Emerging Technologies (CET) list from 18 domains to 14. Brain-computer interfaces were moved from the retired 'Human-Machine Interfaces' category into 'Future Computing Technologies'. Neurotechnologies were separately moved into 'Biotechnology'. In parallel, US Bureau of Industry and Security enforcement is running through the existing Entity List rather than a BCI-specific export rule: Dallas-based neuroscience equipment manufacturer Plexon accepted a $1.7 million suspended civil penalty for unlicensed exports to Entity-Listed parties in China. BIS's 2021 Advance Notice of Proposed Rulemaking on BCI export controls has never been finalised.

Aug 22

Policy & Regulation

China's first foundational BCI national standards took effect on 1 August 2026

China has published its first national-level rulebook for how brain-computer interfaces should be built and how their data should be shared. Two recommended national standards, GB/T 47023-2026 and GB/T 47127-2026, took effect on 1 August 2026, setting a common technical vocabulary and a shared data format for Chinese BCI companies, hospitals, and researchers. A third standard covering visual-evoked-potential data follows on 1 October 2026. Jointly issued by SAMR and SAC. Published 28 January 2026.

Aug 16

Policy & Regulation

California AB 1883 would prohibit employer collection of brain data unless used for safety

California Assemblymember Isaac Bryan's AB 1883, which regulates workplace surveillance including a specific prohibition on employer collection of neural data with a safety-use carve-out, has cleared the Assembly and moved most of the way through the Senate per CalMatters' 10 August 2026 tracking. A parallel Assembly Bill 1542 authored by Assemblymember Christopher Ward would prohibit the sale of neural data. Vermont S.71 (signed 16 June 2026) and H.814 (signed May 2026) are the most recent enacted comparators.

Aug 11

Policy & Regulation

EU AI Act transparency obligations apply today, high-risk obligations deferred to December 2027

On 2 August 2026, EU AI Act transparency obligations under Article 50 became applicable, requiring emotion-recognition and biometric-categorisation systems to notify natural persons exposed to them. The high-risk obligation suite under Annex III, including conformity assessment and human oversight, was deferred to 2 December 2027 by the Digital Omnibus (Regulation EU 2026/1744) adopted by the Council on 29 June and in force since 27 July 2026. Most compliance framings are conflating the two.

Aug 2

Policy & Regulation

Beijing Tiantan Hospital seeds Xizang's first plateau BCI centre at Lhasa People's Hospital

Xinhua reported on 9 July 2026 that Xizang (Tibet Autonomous Region)'s first plateau brain-computer interface clinical application centre was inaugurated at Lhasa People's Hospital. A medical assistance team from Beijing Tiantan Hospital, Capital Medical University, introduced the non-invasive EEG-based BCI technology, which drives exoskeleton and robotic-arm actuators for motor rehabilitation. The centre sits within a six-year Tiantan-Lhasa department-support partnership dating to 2020, and targets cerebral haemorrhage, cerebral ischemia, TBI, spinal cord injury, and peripheral nerve injury indications.

Jul 10

Policy & Regulation

Beijing names Changfazhan its first BCI incubation platform under the Future Industry programme

Beijing Municipal Bureau of Economy and Information Technology announced on 1 July 2026, with English release on 7 July, that the Changfazhan Brain Science and Brain-Computer Interface Incubation Platform in Changping district has been designated as one of seven newly recognised Future Industry Incubation Platforms, the first BCI-specific platform under that specific programme. Shanghai municipal science commission director Luo Dajin separately claimed on 6 July that Shanghai hosted nearly 60 per cent of China's BCI financing events, 40 per cent of the disclosed funding amount, and one-third of the country's BCI companies in the first half of 2026.

Jul 7

Policy & Regulation

China's NMPA locks BCI device classification: every implant is Class III, one narrow Class II lane

China's National Medical Products Administration issued Announcement No. 24 (2026) on 29 June 2026, releasing final Guiding Principles for the Classification and Definition of Brain-Computer Interface Medical Device Products plus a companion Generic Naming Guidelines. Every invasive BCI is Class III. Non-invasive BCIs are Class III by default. Non-invasive stroke-motor rehabilitation devices are Class II only if they do not incorporate artificial intelligence.

Jul 4

Policy & Regulation

Connecticut and Vermont activate neural data privacy laws on 1 July, taking the US count to five states

Connecticut's Public Act 25-113 (SB 1295), signed by Governor Ned Lamont on 25 June 2025, takes effect on 1 July 2026 and adds 'any information that is generated by measuring the activity of an individual's central nervous system' to the Connecticut Data Privacy Act's sensitive-data category. Vermont's Act 101 (H.814), signed 18 May 2026, takes effect the same day. After 1 July, Colorado, California, Montana, Connecticut and Vermont will all have active neural data privacy law on the books. Connecticut's definition is the narrowest of the five.

Jun 21

Policy & Regulation

Neuralink hires its first federal lobbyists to open the brain-computer interface coverage account

Newly filed federal disclosures show that Neuralink has engaged Jeffrey J. Kimbell & Associates and Arnold & Porter Kaye Scholer as its first registered federal lobbyists, with both firms beginning work at the end of April 2026. The scope explicitly names brain-computer interface development and commercialisation plus 'coverage of such devices' as the lobbying focus. The team on the Arnold & Porter side includes former 13-term Wisconsin Democratic Rep. Ron Kind, Senior Counsel at the firm since January 2024 and a former House Ways and Means Committee member overseeing Medicare payment programs. The hire is the first publicly visible step Neuralink has taken toward US Medicare reimbursement positioning for the N1 implant.

Jun 3

Policy & Regulation

Synchron CEO Tom Oxley joins Australian founder pushback against Chalmers's CGT proposal

Synchron co-founder and CEO Tom Oxley publicly criticised Treasurer Jim Chalmers's proposed capital gains tax changes in The Australian on 25 May 2026, joining a growing Australian founder coalition arguing the 2026-27 federal budget reforms would push tech talent and startup equity offshore. The Chalmers budget, handed down 12 May 2026, proposes removing the 50% CGT discount from 1 July 2027 and replacing it with cost-based indexation plus a 30% minimum tax on net capital gains.

May 26

Policy & Regulation

NIH BRAIN Initiative publishes 10-year Neuroscience Research Roadmap in Neuron, anchoring next decade of US federal neuroscience around four Innovation Domains

NIH BRAIN Initiative Director John Ngai and Acting NINDS Director Amy Bany Adams jointly announced the formal publication of the BRAIN Initiative's 10-year Neuroscience Research Roadmap on 15 May 2026, with a Director's Message and a paper in Neuron. The roadmap, finalised in August 2025, organises the next decade of US federally-funded neuroscience around four Innovation Domains: BRAIN Knowledgebase, Precision Molecular Circuit Therapies, Accelerating Human Neuroscience, and BRAIN NeuroAI.

May 22

Policy & Regulation

Vermont signs H.814 into law, becoming the fifth US state with a neural rights statute

Governor Phil Scott signed H.814 into law on 18 May 2026, making Vermont the fifth US state with neural data privacy legislation on the books after Colorado, California, Montana, and Connecticut. The enacted text is the 6-page version of a bill that originally cleared the House at 32 pages; the consent requirement and private right of action did not survive the Senate amendment process. Effective 1 July 2026.

May 21

Policy & Regulation

Medicare Has No Plan for Brain-Computer Interfaces

A Health Affairs analysis argues that CMS needs a dedicated coverage pathway for implantable BCIs before the technology outpaces the reimbursement system that patients depend on.

Mar 21