Brain-Computer Interfaces Are Coming. The Ethics Haven't.

In January 2024, Neuralink confirmed that a human had received its first brain-computer interface implant. The subject — a quadriplegic man — was able to control a computer cursor with his thoughts within weeks. The technical achievement is real. The device works. The hard questions about what this technology becomes as it scales have not been answered — and in most cases have not been seriously asked.

What BCIs Actually Do (Now)

Current clinical BCI applications are medical: restoring motor function to paralysed patients, enabling communication for people with locked-in syndrome, treating treatment-resistant depression via deep brain stimulation. These applications have genuine clinical benefit and are subject to medical device regulation through the FDA and equivalent bodies. The risk-benefit calculus for a paralysed patient who gains mobility through an experimental implant is different from that for an elective consumer enhancement.

Neuralink's stated long-term ambition is not medical. It is cognitive enhancement for healthy people: faster information processing, direct brain-to-device communication, eventually brain-to-brain communication. The company has been explicit about this. The regulatory pathway for elective cognitive enhancement via brain implant does not currently exist.

The Data Problem

A BCI that reads neural signals is generating neural data. Neural data is qualitatively different from other biometric data — heart rate, sleep patterns, genetic sequences — because it potentially captures thought, emotion, and intention at a granularity that has never been technically accessible before. Who owns that data? What can it be used for? Can it be sold to third parties? Can it be subpoenaed?

These questions have no current legal answers in any major jurisdiction. The closest analogue — genetic data regulation under GINA in the US and GDPR Article 9 in Europe — provides a partial framework, but neural data was not anticipated when these laws were written. Colorado's Biometric Data Privacy Act and Illinois's BIPA cover some biometrics; neither was designed with neural interfaces in mind.

Disability Rights and Autonomy

The disability rights community has been more cautious about BCI enthusiasm than the technology press. The concern is not with medical applications — cochlear implants, deep brain stimulators, and retinal prosthetics have all been broadly welcomed. The concern is with who controls the interface. If a BCI requires proprietary hardware, cloud connectivity, and ongoing software updates to function, a disabled user who depends on it for mobility or communication becomes entirely dependent on the continued operation and goodwill of a commercial entity.

The analogy to hearing aids is instructive. Cochlear implant users have described the anxiety of device discontinuation, software updates that change device behaviour without consent, and the practical impossibility of switching vendors once implanted. Scale those problems to a device that mediates basic cognitive function and the stakes become considerably higher.

What Good Governance Would Look Like

The FDA's breakthrough device designation accelerates review for devices addressing serious conditions. It is not designed to evaluate the long-term societal implications of consumer cognitive enhancement. What is needed — and largely absent — is a cross-disciplinary governance framework that treats neural interface data as a special category, establishes right-to-repair and vendor-independence requirements, requires informed consent processes developed with disability rights advocates, and creates independent oversight of enhancement claims. The window to build this framework is closing. The technology is not waiting for the ethics to catch up.