The most consequential regulatory shift in consumer neurotechnology didn’t come from a congressional hearing or a headline-grabbing enforcement action. It came from two updated guidance documents, published quietly by the FDA on January 6, that most of the BCI industry hasn’t fully absorbed yet.

The first updates the agency’s General Wellness Policy — the framework that determines which low-risk devices can reach consumers without going through the full premarket review gauntlet. The second revises the rules for Clinical Decision Support (CDS) Software, the category that covers AI tools helping clinicians interpret patient data. Together, they redraw a boundary that every company selling a non-invasive brain device needs to understand.

Here’s what changed. Under the updated wellness policy, the FDA has expanded the types of noninvasive wearables that can qualify for enforcement discretion — meaning the agency won’t regulate them as medical devices as long as they stay within certain lines. Blood pressure, blood glucose estimates, oxygen saturation — metrics that would have triggered premarket review requirements under the 2019 guidance — can now be framed as wellness features if the device is noninvasive and the marketing stays on the right side of the word “diagnosis.”

The distinction the FDA is drawing is between physiological signals and medical information. A device that streams continuous heart rate data and flags when something looks off? Wellness. A device that tells you you’re having atrial fibrillation? Medical device. The difference is the claim, not the sensor.

For consumer neurotechnology, the implications are immediate. EEG-based headbands that measure focus, relaxation, or sleep quality — products from companies like Muse, Emotiv, and Neurosity — have been operating in the wellness gray zone for years. The updated guidance gives that gray zone more definition and, arguably, more room. A device that reads brainwave patterns and tells you your focus score is declining could now sit more comfortably in the wellness category. A device that tells you it’s detected early signs of cognitive decline is a medical device and needs clearance.

The CDS software update matters differently. Under the revised guidance, AI tools that provide a single clinical recommendation can now qualify for enforcement discretion — provided the developer gives clinicians enough transparency to independently evaluate the recommendation. The previous guidance had pushed developers to present multiple options, on the theory that a single recommendation looked too much like an automated diagnosis. The FDA has now softened that position, acknowledging that sometimes only one option is clinically appropriate.

This is directly relevant to the growing number of companies building AI-powered brain analysis platforms. Salma Health’s Brain Health OS, Cognito’s Spectris platform, any system that uses neural data to recommend a treatment protocol — all of these sit at the intersection of clinical decision support and neurotechnology. The loosened CDS guidance could mean fewer regulatory hoops for tools that recommend, say, a specific TMS protocol based on a patient’s brain imaging, as long as the clinician can see the reasoning.

But the guidance cuts both ways. The FDA is signaling that it’s willing to give consumer neurotech companies more room to operate — but only if they don’t overreach on their claims. The moment a consumer EEG headband starts marketing itself as a diagnostic tool for ADHD or depression, it crosses the line from wellness to medical device, and the full regulatory apparatus applies. The agency hasn’t loosened its standards; it has sharpened the distinction between what triggers them.

There’s also a gap the guidance doesn’t close. The US still has no equivalent of Europe’s GDPR-level protections for health data collected by wellness devices. A noninvasive neurotech headband that reads your brainwave patterns all day is, under this framework, a wellness device — and the data it collects is not subject to HIPAA. What happens to that neural data, who can buy it, and how it can be used are questions the FDA’s wellness guidance deliberately does not answer.

The net effect: the regulatory path for consumer neurotechnology in the US just got wider, but the guardrails got sharper. Companies that stay on the wellness side of the line have more room to move. Companies that blur it will find that the FDA’s updated framework gives the agency a cleaner basis for enforcement. The line has moved, but it hasn’t disappeared.