Securing Mental Privacy: Governing Brain and Neural Data CPDP 2026

Securing Mental Privacy: Governing Brain and Neural Data Neurotechnology is leaving the lab and entering offices, classrooms, clinics and consumer devices. Brain-derived signals and the inferences built on top of them create distinctive privacy risks that current compliance playbooks do not fully address. This panel examines how GDPR and Convention 108+ can be applied to neural signals and derived profiles, what to do about de-identification that rarely holds, and how to keep secondary use in check when inference pipelines are opaque. We will translate ethical guidance into enforceable practice, focusing on DPIAs, legal bases in research and employment, cross-border processing, and procurement criteria. The aim is practical: give regulators, researchers and firms clear choices that actually reduce risk while allowing careful innovation. Questions to be answered: Do neural signals and their inferences fit within existing special-category regimes, or do they need tailored rules? What does a credible DPIA for neurotechnology look like in research, employment and education settings? Where do consent and de-identification break down for brain data, and what alternatives should replace them? Which supervisory outputs would help now, for example classification guidance, model-inference risk baselines, or procurement conditions? Organised by Tilburg University - Tilburg Institute for Law, Technology and Society (TILT) with Aimen Taimur (moderator), Virginia Mahieu, Timo Istace, Alexandra Ziaka, Jacopo Piemonte More information: https://cpdp.be/120706