The law regulates data, but the harm lies in inference
The law protects categories of data. The deeper risk is what systems conclude about a person’s emotions, vulnerabilities, intentions and future behaviour — even from ordinary conversation alone.
Protect mental and neural data according to what it reveals, not where it was collected. Governance must reach the models built about a person and the actions taken from them.
