Defending the Last Frontier of Human Freedom.

Neurotechnology is advancing at a pace that European legal systems have not anticipated. Consumer brain-computer interfaces, neural wearables, and EEG-based devices are entering workplaces, clinical settings, and the consumer market with minimal regulatory oversight. Existing EU frameworks, including the GDPR, the Medical Device Regulation, and the AI Act, were not designed with neural data in mind. They offer partial protections at best, and leave critical gaps: around the commercial use of brain-derived data, the consent standards applicable to neuro-monitoring, and the rights of individuals who decline neurotechnological interventions in contexts where such refusal carries professional or social costs.

AI-driven behavioral and cognitive manipulation represents a parallel and equally pressing threat. Algorithmic systems deployed by digital platforms, employers, and public institutions increasingly operate on psychological models capable of predicting, nudging, and shaping cognition below the threshold of conscious awareness. These systems exploit behavioral data at scale to influence attention, belief formation, and decision-making in ways that individuals cannot readily detect or resist. The combination of large-scale affective profiling with real-time personalization creates conditions for cognitive interference that existing consumer protection law and competition regulation are ill-equipped to address.

In workplace and law enforcement contexts, cognitive monitoring is becoming operationally normal. Employers in high-risk industries are deploying EEG-based fatigue monitoring and attentional tracking. Law enforcement agencies across several EU member states are piloting or evaluating deception-detection technologies that rest on contested neuroscientific claims. In both cases, individuals face pressure, structural if not always explicit, to submit to cognitive surveillance as a condition of employment, professional certification, or public participation. The legal standards governing consent, proportionality, and non-discrimination in these contexts remain underdeveloped.

What is conspicuously absent from the European civil society landscape is a dedicated coalition focused specifically on cognitive and neural rights. Digital rights organizations such as EDRi have contributed vital advocacy work on privacy, surveillance, and algorithmic accountability. But the distinctive vulnerabilities created by neurotechnology, including access to the contents of cognition, interference with mental processes, and the erosion of mental self-determination, require specialized expertise that no existing organization has made its primary mandate. ECLN is being established to fill that gap.

Cognitive liberty is the right to mental self-determination: the freedom to shape one's own cognitive processes, to use or refuse technologies that interact with the mind, and to be protected from non-consensual interference with one's mental life. The concept was developed in legal and philosophical scholarship as a response to the inadequacy of existing rights frameworks in the face of advancing neurotechnology.

The most influential formal articulation comes from Marcello Ienca and Roberto Andorno, whose 2017 framework proposed four novel neurorights derived from cognitive liberty: the right to mental privacy, the right to mental integrity, the right to psychological continuity, and, foundationally, cognitive liberty itself. In their analysis, cognitive liberty comprises two dimensions: a positive right: the freedom to use neurotechnologies to alter, augment, or expand cognitive capacities; and a negative right: protection from coercive, deceptive, or non-consensual cognitive interference by states, employers, or private actors. Both dimensions are necessary: a framework that protects only against interference without protecting voluntary cognitive self-modification is incomplete, as is one that permits free use of neurotechnology while tolerating coercive applications.

Jan Christoph Bublitz has further developed the concept of mental self-determination as a foundational legal principle, arguing that the interior of the mind (its contents, processes, and states) deserves special legal protection precisely because of its centrality to personal identity, autonomy, and agency. On this account, cognitive liberty is not merely one right among others but a precondition for the meaningful exercise of all other rights: democratic participation, freedom of expression, religious belief, and rational self-governance each presuppose a mind that is substantively free to form its own judgments.

Existing rights frameworks offer partial but insufficient coverage. Article 9 of the European Convention on Human Rights protects freedom of thought, conscience, and religion, and the European Court of Human Rights has occasionally treated the inner forum of thought as inviolable. Article 3 of the EU Charter of Fundamental Rights guarantees the right to physical and mental integrity. But both provisions were drafted in an era when direct technological interference with cognition was largely hypothetical, and their interpretation has not kept pace with developments in neurotechnology and AI. They offer no clear protection against subliminal algorithmic influence, no consent framework for workplace neuro-monitoring, and no mechanism for addressing the aggregation of neural data into cognitive profiles. Dedicated legislative frameworks, at EU and Council of Europe level, are required to address these gaps, and civil society coordination is indispensable to building the policy expertise and advocacy infrastructure necessary to achieve them.

Europe has a mature civil society infrastructure for digital rights. European Digital Rights (EDRi) coordinates a network of more than fifty member organizations advocating on privacy, surveillance, algorithmic accountability, and platform regulation. But EDRi's mandate, and that of its members, centers on the digital sphere broadly construed. No equivalent coalition exists for the specific challenges posed by neurotechnology and cognitive liberty: the intersection of brain-computer interfaces, neural data, AI-driven cognitive influence, and the fundamental rights questions they generate.

The EU AI Act, which entered into force in 2024, represents a landmark in algorithmic governance but leaves significant gaps at the cognitive frontier. Neural data is not designated as a special category under the Act's risk classification framework, and AI systems designed to infer mental states such as emotions, beliefs, and intentions are addressed only partially through biometric identification provisions. The GDPR offers stronger protections for health data that encompasses some neural measurements, but its architecture was not designed for the real-time, continuous, and highly inferential character of modern neuro-data processing. Neither framework addresses the rights-relevant question of cognitive manipulation: the use of AI to shape thought processes, rather than merely to process information about them.

At the intergovernmental level, the Council of Europe and UNESCO have been active. The Council of Europe's work on neurotechnology and human rights has produced important analytical work, and UNESCO's Recommendation on the Ethics of Neurotechnology (2024) established a global normative framework. But intergovernmental processes move slowly, and their outputs are dependent on member state political will. Civil society engagement, bringing technical expertise, public interest perspectives, and democratic accountability, is essential to translating normative frameworks into enforceable law. That civil society infrastructure, at the European level, does not yet exist for neurorights.

ECLN is established to fill this structural gap. By convening organizations, researchers, and advocates from across Europe around a shared mandate, the network creates the institutional capacity needed to engage EU institutions in legislative processes, coordinate research across disciplines, build public understanding of cognitive threats, and ensure that the policy frameworks governing neurotechnology reflect the rights of individuals rather than the interests of technology developers and deployers alone.