While federal law protects medical information [14] and
generally guards against unfair or deceptive practices [5], few
rules or standards currently limit access to BCI-generated
data. Importantly, platforms are immunized for apps that thirdparties
submit, such that BCI-manufactures are not necessarily
incentivized, from a legal vantage, to police against abusive
apps.