How do Colorado and California define neural data, and what changes for a company that collects it? · Grey Matter

Colorado's law, signed in April 2024, defines neural data as information generated by measuring the activity of a person's central or peripheral nervous system that can be processed by or with a device; California's, signed in September 2024, uses nearly the same words and excludes data inferred from non-neural informa

How do Colorado and California define neural data, and what changes for a company that collects it?

Colorado's law, signed in April 2024, defines neural data as information generated by measuring the activity of a person's central or peripheral nervous system that can be processed by or with a device; California's, signed in September 2024, uses nearly the same words and excludes data inferred from non-neural information. In Colorado neural data became sensitive data under the Colorado Privacy Act, so a company needs the person's consent to process it; in California it became sensitive personal information, which consumers can require a business to use only as needed for the service they asked for. Both laws attach the protection to the measurement itself, before anything is decoded from it.