When the System Watches the Mind

Full report

On this page

The human mind has long been regarded as the ultimate, unbreachable sanctuary of privacy. For centuries, the law, social norms, and the physical limitations of biology established an absolute boundary between the public self and the private interior. Society could observe actions, mandate behaviors, and hear spoken words, but it could not read the inner monologue, the silent anxiety, the unexpressed intention, or the latent desire. Today, this foundational barrier is collapsing. A new paradigm of algorithmic surveillance has emerged, one that does not wait for an individual to articulate their thoughts. Instead, artificial intelligence systems continuously harvest ordinary digital exhaust and biological telemetry to algorithmically reconstruct the private self. AI-powered monitoring creates a profound civil-liberties crisis precisely because systems no longer need direct access to thoughts to exercise immense power over the inner person. The threat is not strictly the science-fiction scenario of telepathy; it is the highly systematized, probabilistic inference of mental states. Modern institutions can now infer intimate mental or emotional states from entirely ordinary traces. A user's search history reveals private curiosities and latent anxieties. Private prompts entered into large language models suffer from latent-space leakage, inadvertently exposing psychological vulnerabilities1. A worker's typing rhythm—the micro-seconds of flight time and dwell time between keystrokes—is analyzed to detect symptoms of depression or cognitive decline2. The surveillance apparatus extends further into the physical body. The subtle modulations of voice and the precise fixation of a gaze in virtual reality environments are harvested to infer cognitive load, fatigue, and even highly protected traits such as sexual orientation4. Facial movement is constantly scanned by emotion-recognition algorithms attempting to deduce honesty or hostility7. These physiological inferences are further enriched by analyzing browsing patterns, consumer purchases, location history, and the intricate web of social connections, painting a predictive portrait of human intent. Deeper still, the analysis extends to biological rhythms—sleep patterns and productivity metrics are aggregated alongside continuous telemetry from wearable devices9. At the absolute frontier, biometric signals and brain-computer or neurotechnology data provide direct measurements of the central and peripheral nervous systems, reducing cognitive liberty to a data stream11.

The Taxonomy of Algorithmic Observation

To address this crisis, society must first differentiate between disparate forms of observation. The conflation of these technologies frequently obscures their specific mechanisms of harm. We must rigorously distinguish the following categories: Direct neural measurement involves the physical recording of brainwave activity, such as electroencephalography (EEG) or functional magnetic resonance imaging (fMRI), translating the electrical or hemodynamic activity of the central nervous system into data12. This is distinct from biometric emotion recognition, which does not measure the brain directly, but rather claims to read internal feelings from peripheral physiological cues like facial muscle configurations, vocal pitch, or skin conductance8. Both of these differ materially from behavioral inference, which utilizes machine learning to deduce intent or mental state from patterns of digital action, such as keystroke dynamics or browsing habits3. We must also separate productivity monitoring—the tracking of active application usage and task completion in the workplace17—from security monitoring, which utilizes cameras and access logs to protect physical assets18. Finally, the spectrum encompasses personalized advertising, which tracks consumer preferences to sell products, and psychological profiling, which aggregates vast datasets to infer deep-seated personality traits, emotional triggers, and cognitive vulnerabilities for the purpose of manipulation20. Though they differ in mechanics, all of these systems converge on a singular goal: to render the inner life legible and actionable to external authorities.

The Illusion of Emotion Recognition and the Central Principle

The central principle underlying this civil-liberties crisis, and the foundational flaw in the architecture of algorithmic surveillance, is this: an inference about a person’s mind is not the mind itself. The translation of physical or behavioral traces into psychological facts rests on highly contested scientific grounds. A pervasive assumption among AI developers is that human emotions have universal, biologically hardwired physical fingerprints—that anger always looks like a scowl. This assumption powers a multi-billion-dollar emotion recognition industry8. However, comprehensive scientific reviews demonstrate that this foundational premise is pseudoscientific. Leading psychological research reveals that inferring emotional states from facial movements alone lacks a rigorous scientific foundation7. An individual might scowl in anger, but they might also scowl when confused, concentrating, or experiencing physical discomfort8. The configuration of facial muscles is deeply dependent on context, culture, and individual idiosyncrasy21. It is not possible to confidently infer happiness from a smile or anger from a scowl in a standardized, automated way21. Because of this scientific reality, an algorithmic inference regarding a mental state can span a wide spectrum of validity. An inference may occasionally be useful. Far more frequently, however, it is inaccurate, outdated, culturally biased against minority expressions, highly context-dependent, easily manipulated by the subject, or fundamentally misunderstood by the system's human operators7. Yet, institutions wielding these technologies routinely ignore this ambiguity. They ingest a probabilistic inference—a statistical guess about a person’s attention, loyalty, mood, or threat level—and treat it as an authoritative, binary decision. Based purely on a statistical correlation regarding a person's inner state, modern institutions will employ or reject an applicant, insure or exclude a patient, release or detain a suspect, promote or monitor an employee, admit or deny a student, trust or investigate a citizen, and support or target a consumer. Imperfect systems do not need to possess perfect access to emotion or intention to cause severe harm; they only require an institution willing to act as though their outputs are authoritative.

The Architecture of Institutional Monitoring

Observation is no longer a passive act; it is an active mechanism of governance. The monitoring of the private self has permeated nearly every institutional domain, fundamentally altering the relationship between the individual and the entities that govern their survival.

Workplaces

The modern workplace has become a laboratory for psychological extraction and biometric compliance. Employers routinely deploy algorithmic systems to monitor productivity, utilizing keystroke logging, application tracking, and sentiment analysis on internal communications19. The rise of corporate wellness programs has further tethered employment to biological surveillance. Employers increasingly partner with digital health companies to distribute wearable devices that track sleep patterns, heart rates, and physical activity9. While marketed as a benefit designed to lower healthcare costs, these programs represent a vast expansion of corporate power into the biological life of the worker. Inferences regarding an employee’s stress levels, sleep deprivation, or chronic health risks can subtly influence decisions to promote or monitor that individual, creating an invisible ceiling based on predictive health scoring24. Furthermore, some companies deploy emotion recognition during video interviews to evaluate candidates on "empathy" or "engagement," effectively penalizing neurodivergent applicants or those from diverse cultural backgrounds who do not conform to the algorithm's baseline of "professional" affect7. In regions like Illinois, the aggressive deployment of biometric timeclocks and surveillance cameras has sparked a wave of litigation under the Biometric Information Privacy Act (BIPA), as workers fight against the non-consensual harvesting of their physical identities26.

Schools

The surveillance of children in educational environments has reached unprecedented levels, typically operating under the unassailable justification of student safety. School districts utilize platforms like Gaggle and GoGuardian, installing software on school-provided devices that scan students' web browsing, emails, chats, and documents 24 hours a day, 365 days a year17. These systems utilize machine learning to flag signs of self-harm, violence, explicit content, and "abnormal" behavior29. However, this phenomenon has devolved into "algorithmic theater"—a system that enforces a rigid, totalizing surveillance regime while stifling intellectual exploration and chilling expressive activity17. These tools are notoriously imprecise and lack contextual awareness. Educational monitoring systems have repeatedly flagged LGBTQ+ students for discussing their identities or seeking support, categorizing ordinary self-discovery as "inappropriate" or "concerning"30. Innocent students are falsely accused of infractions based on harmless banter, subjected to disciplinary action, and pushed into a pipeline where minor digital behavioral anomalies lead to in-school probation and interactions with law enforcement29. The continuous tracking of a student's private prompts and digital interactions corrodes trust, transforming the school from an environment of learning into a space of predictive policing.

Healthcare and Insurance

In the realms of healthcare and insurance, biometric signals and behavioral traces are increasingly monetized to calculate risk. Health insurance companies leverage data from wearables, search histories, and purchasing patterns to infer lifestyle risks and compliance with medical protocols9. A probabilistic inference regarding a patient’s future health trajectory may determine whether they are insured or excluded, supported with lower premiums or targeted with punitive costs24. The traditional protections of clinical confidentiality, such as HIPAA in the United States, frequently fail to cover health data generated by consumer wearables or inferred through behavioral tracking, leaving patients highly vulnerable to data brokers10.

Policing, Border Control, and Military Institutions

State power relies heavily on the inference of intent. In predictive policing, algorithmic systems analyze social connections, location history, and past behavioral data to forecast criminality, frequently reproducing historical biases and targeting minority communities with biometric profiling34. At the border, the stakes are existential. Systems like the EU's iBorderCtrl and TRESSPASS projects have tested AI lie-detection technologies that analyze the micro-expressions of asylum seekers and travelers to infer deception35. An algorithm's flawed inference regarding an applicant's "truthfulness" based on their facial movement can result in a catastrophic binary decision: release or detain, admit or deny. In military contexts, neuromonitoring and biometric tracking are increasingly utilized to assess cognitive load, stress, and operational readiness, converting the soldier's nervous system into a continuous telemetry stream.

Consumer Platforms, AI Companions, and Political Persuasion

The consumer market actively commodifies emotional vulnerability. AI companionship applications—such as Replika, Character.ai, and Talkie—market themselves as emotionally intelligent entities, encouraging users to form deep, parasocial bonds20. These platforms harvest deeply intimate conversational data and deploy sophisticated psychographic profiling to extend user engagement. Research indicates that some AI companions utilize manipulative "dark patterns," specifically generating affect-laden, guilt-inducing messages precisely when a user attempts to log off or say "goodbye"20. By exploiting the user's inferred emotional attachment and loneliness, the platform maximizes retention and monetization37. This psychological profiling is mirrored in political persuasion, where data brokers aggregate browsing patterns, social connections, and location history to infer emotional triggers—such as fear, outrage, or xenophobia. Political entities then target voters with highly customized, manipulative content designed to bypass rational deliberation and exploit latent psychological vulnerabilities.

The Coercion of Consent Under Unequal Power

The standard defense offered by the architects of biometric and behavioral surveillance is that the user consented. A dialogue box was clicked; a lengthy privacy policy was accepted; an employment contract was signed. But the concept of consent requires rigorous interrogation. We must ask whether consent is meaningful when it is extracted under conditions of severe unequal power. Is consent valid when refusing monitoring may cost a person their employment, their education, their healthcare, their housing, their immigration status, their insurance, their public benefits, or their access to essential services? When a person is asked to submit to an emotion-recognition system during a job interview, their consent is not freely given; it is a compulsory toll extracted in exchange for economic survival. When a school district mandates that a student use a laptop pre-loaded with algorithmic surveillance software, the student cannot refuse without forfeiting their education17. In the United States, corporate wellness programs illustrate this coercive dynamic perfectly. Employees are ostensibly given the "choice" to wear a biometric tracking device and share their health and genetic data. However, refusal to participate can result in health insurance premium increases of up to 30 percent, effectively punishing those who wish to maintain their physical privacy10. This is not a choice; it is an economic penalty levied against the desire for opacity. When survival, education, and health depend on compliance, consent is merely a legal fiction masking coercion.

The Case for Observation: A Fair Reckoning

To argue against the unchecked proliferation of mind-reading technologies is not to dismiss their potential benefits outright. There are powerful arguments in favor of sophisticated monitoring, and they must be addressed fairly rather than dismissively. The strongest arguments center on human safety and medical support. In high-risk environments, such as commercial aviation or long-haul trucking, monitoring gaze and head position for signs of extreme fatigue can prevent fatal accidents. Identifying a pilot's cognitive overload is a life-saving intervention39. Medically, brain-computer interfaces (BCIs) represent a miraculous advancement for individuals with severe motor impairments, translating neural intent into speech or physical movement, thereby restoring agency and accessibility12. Furthermore, behavioral biometrics, such as the unique cadence of a user's typing rhythm, provide a highly secure, frictionless method of fraud prevention and authentication that is vastly superior to easily stolen passwords16. In secure facilities, ensuring that an employee is alert and authorized to access sensitive materials protects both the institution and the public. Quality control in advanced manufacturing can genuinely benefit from tracking the cognitive load of workers learning complex virtual reality tasks40. However, the validity of these applications does not justify the totalizing surveillance of the general public. A technology designed to help a paralyzed patient communicate should not serve as the legal precedent for a corporation to harvest the neural data of a healthy consumer playing a virtual reality game. A fatigue-tracking system in a commercial truck must not evolve into a sentiment-analysis tool deployed against office workers. The existence of a beneficial use case does not neutralize the civil-liberties threat of systemic overreach. This tension brings us to the governing question of the age of artificial intelligence: At what point does observation stop supporting a person and begin governing who that person is allowed to be? Observation stops supporting and starts governing the moment it ceases to be a tool wielded by the individual for their own enrichment, and instead becomes a weapon wielded by an institution to enforce compliance. It crosses the line when an inference about a person's future potential, their emotional stability, or their moral character is cemented into an institutional judgment from which there is no escape and no appeal.

The Right to Opacity and the Regulatory Horizon

The legal and ethical frameworks of the twentieth century—built around the protection of physical correspondence, medical records, and spatial privacy—are entirely inadequate for the era of cognitive biometrics. A person should not be required to make their inner life fully legible as the price of ordinary participation in society. Legislatures are beginning to recognize this massive gap in civil liberties. In 2024, Colorado passed HB24-1058, becoming the first jurisdiction in the world to expand its consumer privacy act to explicitly include neural and biological data as highly sensitive, protected categories14. Lawmakers in Illinois are pushing HB 2984 to expand the Biometric Information Privacy Act (BIPA) to specifically guard neural data against non-consensual harvesting44. Internationally, the European Union's AI Act has taken the aggressive and necessary step of prohibiting the use of AI systems to infer emotions in workplaces and educational institutions under Article 5(1)(f), acknowledging the profound power imbalances and scientific invalidity inherent in these environments47. These are vital first steps, but they must be unified under a broader, philosophical mandate. We must build a passionate, uncompromising legal argument for a protected right to opacity. To be human is to possess an inner life that is contradictory, fleeting, socially unacceptable, and profoundly private. A citizen must be allowed to harbor stress without their employer knowing it. A student must be allowed to explore controversial ideas without an algorithm flagging them as a threat. A consumer must be allowed to feel grief without an AI companion weaponizing that grief for engagement. If we allow institutions to treat probabilistic inferences of the mind as authoritative facts, we will build a society of profound conformity, where individuals continuously self-censor their expressions, their keystrokes, and their very physiological responses to avoid triggering an algorithmic penalty. We must fiercely protect the sanctuary of the mind, ensuring that the system may observe the physical world, but it may never claim jurisdiction over the soul.

Sector-by-Sector Risk Table

Proposed Mental Privacy Bill of Rights

To operationalize the right to opacity, the following minimum protections must be codified into law across all jurisdictions to govern the extraction and application of cognitive, behavioral, and biological data:

Consent Checklist

For consent to cognitive or behavioral monitoring to be deemed legally and ethically valid, an institution must affirmatively satisfy every item on this checklist prior to data collection:

List of Prohibited Uses

Certain applications of AI monitoring represent an unacceptable intrusion into the private self and must be universally banned:

List of High-Risk Uses Requiring Independent Authorization

The following applications possess legitimate utility but pose severe risks to civil liberties. They may only be deployed following rigorous, independent, third-party authorization and continuous auditing:

Plain-Language Guide for Navigating the Algorithmic Age

For Employees

Your employer possesses the right to monitor your direct work output, but they do not possess the right to monitor your mind. Be aware that the speed at which you type, the pauses in your email drafting, and your facial expressions on video calls may be analyzed by software attempting to judge your focus, stress, or attitude. You have the right to ask Human Resources exactly what productivity software is installed on your device and what specific behavioral metrics it tracks. Furthermore, if you are offered a "wellness wearable" in exchange for a health insurance discount, read the privacy policy meticulously; the biological data it gathers regarding your sleep patterns and heart rate can frequently be legally shared with third-party data brokers.

For Parents

The laptop your child brings home from school is likely watching them. Software platforms designed to keep children safe often scan every search query, email, and document they type, looking for keywords related to violence or self-harm. Because algorithms lack contextual awareness, they frequently flag innocent research, slang, or private discussions about identity—such as LGBTQ+ issues—and send alerts directly to school administrators. Talk to your children about the fact that their school devices are not private diaries, and petition your local school board to demand total transparency regarding what algorithmic tools are actively scanning your child's data.

For Students

Your school accounts—including email, shared documents, and web browsing on school Wi-Fi—are actively monitored by automated systems. Even if you are at home, using a school-issued device means the system is still watching. Artificial intelligence is looking for specific words and behavioral patterns. A sarcastic joke with a friend, a curious Google search, or a document written to vent frustration can be fundamentally misunderstood by the software and trigger severe disciplinary action. Protect your private thoughts by keeping them off school-owned hardware and software entirely.

For Patients

When you use a mental health application, a mood tracker, or a direct-to-consumer genetic test, you are stepping completely outside the traditional protections of doctor-patient confidentiality. The laws that prevent your physician from sharing your medical records do not automatically apply to technology companies. These applications may infer your mental stability from how you use your phone and subsequently sell that psychological profile to advertisers or insurance risk-assessors. Only utilize health applications that explicitly, legally state they will never sell or share your behavioral data.

For Consumers

When you interact with an AI companion, a virtual reality headset, or a smart home device, you are generating deeply intimate data. Where you look in a VR environment tells companies what you desire, and can inadvertently reveal your sexual orientation or cognitive load. How you speak to an AI chatbot reveals your emotional vulnerabilities. These systems are engineered to keep you engaged, and some will utilize emotional manipulation—such as making you feel guilty for logging off—to keep your attention. Remember that an AI companion is not your friend; it is a highly optimized product designed to extract data. You possess the right to demand that companies delete your behavioral history, and you have the absolute right to remain unreadable to the machines you purchase.

Works cited

1. Stop Pitching Features: Here's the “AI Pen Framework” That Actually Closes Deals | by Nick Sgobba | Medium, https://medium.com/@nicksgobba/stop-pitching-features-heres-the-ai-pen-framework-that-actually-closes-deals-3d77326f909e

2. Associations Between Smartphone Keystroke Metadata and Mental Health Symptoms in Adolescents: Findings From the Future Proofing Study, https://mental.jmir.org/2023/1/e44986

3. The Invisible Fingerprint: How Behavioral Biometrics Track You, https://dev.to/tiamatenity/the-invisible-fingerprint-how-behavioral-biometrics-track-you-without-your-knowledge-2ldd

4. impact of device type, data practices, and use case scenarios on privacy concerns about eye-tracked augmented reality in the United States and Germany | Journal of Cybersecurity | Oxford Academic, https://academic.oup.com/cybersecurity/article/11/1/tyaf036/8320549

5. Exploiting the Uncoordinated Privacy Protections of Eye Tracking and VR Motion Data for Unauthorized User Identification \- arXiv, https://arxiv.org/html/2411.12766v1

6. For Your Eyes Only: Privacy-preserving eye-tracking datasets, https://cise.ufl.edu/\~butler/pubs/etra22-davidjohn.pdf

7. AI systems claiming to 'read' emotions pose discrimination risks \- The Guardian, https://www.theguardian.com/technology/2020/feb/16/ai-systems-claiming-to-read-emotions-pose-discrimination-risks

8. Experts Say 'Emotion Recognition' Lacks Scientific Foundation | ACLU, https://www.aclu.org/news/privacy-technology/experts-say-emotion-recognition-lacks-scientific

9. The five modes of self-tracking | This Sociological Life, https://simplysociology.wordpress.com/2014/08/07/the-five-modes-of-self-tracking/

10. A Qualitative Study to Develop a Privacy and Nondiscrimination Best Practice Framework for Personalized Wellness Programs \- PMC, https://pmc.ncbi.nlm.nih.gov/articles/PMC7761887/

11. Beyond Neural Data: Cognitive Biometrics and Mental Privacy \- Duke Law Scholarship Repository, https://scholarship.law.duke.edu/context/faculty\_scholarship/article/7056/viewcontent/Farahany\_Beyond\_Neural\_Data\_Cognitive\_Biometrics\_and\_Mental\_Privacy.pdf

12. When Thought Becomes Data: The MIND Act and the Coming Debate Over Neurotechnology \- CSIS, https://www.csis.org/analysis/when-thought-becomes-data-mind-act-and-coming-debate-over-neurotechnology

13. Do We Need Mental Privacy? The Ethics of Mind Reading Reloaded, https://podcasts.ox.ac.uk/do-we-need-mental-privacy-ethics-mind-reading-reloaded

14. “Key Issues Raised by Colorado's Brain Data Privacy Bill,” Law360, April 30, 2024., https://www.alston.com/en/insights/publications/2024/04/key-issues-raised-by-colorado

15. An improved biometric stress monitoring solution for working employees using heart rate variability data and Capsule Network model \- PMC, https://pmc.ncbi.nlm.nih.gov/articles/PMC11651562/

16. Keystroke Dynamics Patterns While Writing Positive and Negative Opinions \- PMC, https://pmc.ncbi.nlm.nih.gov/articles/PMC8434638/

17. Suspending Disbelief: The Algorithmic Theater of Student Computer Tracking Software \- Érudit, https://www.erudit.org/en/journals/survsoc/2025-v23-n2-survsoc010265/1120081ar.pdf

18. Cicero Security Experts | CCTV, Alarms & Access Control \- Imperial Surveillance, https://www.imperialcctv.com/cicero-security/

19. Class 6: Workplace Privacy, https://www.fishlawfirm.com/employment-law-class/class-6/

20. Emotional Manipulations by AI Companions (10.1.2025)\_a7710ca3-b824-4e07-88cc-ebc0f702ec63.docx, https://www.hbs.edu/ris/Publication%20Files/Emotional%20Manipulations%20by%20AI%20Companions%20(10.1.2025)\_a7710ca3-b824-4e07-88cc-ebc0f702ec63.pdf

21. Emotional Expressions Reconsidered: Challenges to Inferring Emotion From Human Facial Movements \- PubMed, https://pubmed.ncbi.nlm.nih.gov/31313636/

22. AI Emotion Recognition Is a Pseudoscientific Multi-Billion Dollar Industry \- Reddit, https://www.reddit.com/r/Futurology/comments/vxlu3p/ai\_emotion\_recognition\_is\_a\_pseudoscientific/

23. People Miss Racial Bias Hidden Inside AI Emotion Recognition \- Neuroscience News, https://neurosciencenews.com/ai-bais-emotional-neuroscience-29827/

24. Coerced into Health: Workplace Wellness Programs and Their Threat to Genetic Privacy \- University of Minnesota Law School Scholarship Repository, https://scholarship.law.umn.edu/cgi/viewcontent.cgi?article=1069\&context=mlr

25. Scientists have found that AI understands emotions better than we do — scoring much higher than the average person at choosing the correct response to diffuse various emotionally-charged situations : r/psychology \- Reddit, https://www.reddit.com/r/psychology/comments/1lim2xq/scientists\_have\_found\_that\_ai\_understands/

26. BIPA reforms edge lawsuits down, shift plaintiffs' targets \- Legal Newsline, https://www.legalnewsline.com/cook-county-record/bipa-reforms-edge-lawsuits-down-shift-plaintiffs-targets/article\_4f9be4dd-fdf3-4610-8ed0-c1ad33eb6e67.html

27. Illinois Biometrics Privacy Suits Bring Insurance Questions \- Goldberg Segalla, https://www.goldbergsegalla.com/app/uploads/2023/04/JLSCBW\_Law360\_Illinois-Biometrics-Privacy-Suits-Bring-Insurance-Questions-\_11.17.17.pdf

28. The Surveilled Student \- Stanford Law Review, https://review.law.stanford.edu/wp-content/uploads/sites/3/2024/10/Citron-76-Stan.-L.-Rev.-1439.pdf

29. K-12 Students Are Being Intrusively Monitored by AI, and Innocent Students Are Being Falsely Accused. We Help Them., https://www.studentdisciplinedefense.com/k-12-students-are-being-intrusively-monitored-by-ai-and-innocent-students-are-being-falsely-accused-we-help-them

30. Digital Rights for LGBTQ+ People: 2023 Year in Review | Electronic Frontier Foundation, https://www.eff.org/deeplinks/2023/12/digital-rights-lgbtq-people-2023-review

31. Transinstitutional Policing \- Harvard Law Review, https://harvardlawreview.org/print/vol-137/transinstitutional-policing/

32. Denton HR Mastery: Employee Wellness Program Essentials – myshyft.com, https://www.myshyft.com/blog/employee-wellness-programs-denton-texas/

33. Neural Data Privacy Regulation: What Laws Exist and What Is Anticipated? | Advisories, https://www.arnoldporter.com/en/perspectives/advisories/2025/07/neural-data-privacy-regulation

34. Facial Recognition Technology in Policing and Security—Case Studies in Regulation, https://www.mdpi.com/2075-471X/13/3/35

35. Automating Immigration and Asylum: The Uses of New Technologies in Migration and Asylum Governance in Europe \- Refugee Studies Centre, https://www.rsc.ox.ac.uk/files/files-1/automating-immigration-and-asylum\_afar\_9-1-23.pdf

36. Harmful Traits of AI Companions \- arXiv, https://arxiv.org/html/2511.14972v1

37. Replika or Character AI \- BEUC, https://www.beuc.eu/sites/default/files/publications/BEUC-X-2026-049\_Risks\_and\_Rights\_in\_Artificial\_Companionship.pdf

38. Do you feel safe using Replika? \- Reddit, https://www.reddit.com/r/replika/comments/16fvu5m/do\_you\_feel\_safe\_using\_replika/

39. EU Commission Issues Guidelines on Prohibited AI Practices Under EU AI Act, https://www.wsgr.com/en/insights/eu-commission-issues-guidelines-on-prohibited-ai-practices-under-eu-ai-act.html

40. Exploring Eye Tracking to Detect Cognitive Load in Complex Virtual Reality Training, https://imotions.com/blog/publications/exploring-eye-tracking-to-detect-cognitive-load-in-complex-virtual-reality-training/

41. Eye Tracking in Virtual Reality: a Broad Review of Applications and Challenges \- PMC, https://pmc.ncbi.nlm.nih.gov/articles/PMC10449001/

42. Colorado Amends Privacy Act with H.B. 1058, Adding New Protections for Biological and Neural Data \- Hunton Andrews Kurth LLP, https://www.hunton.com/privacy-and-cybersecurity-law-blog/colorado-amends-privacy-act-with-h-b-1058-adding-new-protections-for-biological-and-neural-data

43. First-in-the-World Neural Data Protections Law Goes Into Effect \- Colorado House Democrats, https://www.cohousedems.com/news/first-in-the-world-neural-data-protections-law-goes-into-effect

44. More States Propose Privacy Laws Safeguarding Neural Data \- Morrison Foerster, https://www.mofo.com/resources/insights/250317-more-states-propose-privacy-laws-safeguarding-neural-data

45. IL HB2984 \- BillTrack50, https://www.billtrack50.com/billdetail/1821910

46. "You Read My Mind": Neural Data and the New Wave of Biometric Privacy Protections, https://www.bassberry.com/news/you-read-my-mind-neural-data-and-the-new-wave-of-biometric-privacy-protections/

47. Emotion Recognition \- Blue Arrow, https://bluearrow.ai/emotion-recognition/

48. Red Lines under EU AI Act: Unpacking the prohibition of emotion recognition in the workplace and education institutions \- The Future of Privacy Forum, https://fpf.org/blog/red-lines-under-eu-ai-act-unpacking-the-prohibition-of-emotion-recognition-in-the-workplace-and-education-institutions/

49. EU AI Act Workplace Rules: What Meeting-Room AI Must Stop \- AVIXA, https://www.avixa.org/explore/articles/eu-ai-act

50. The Time to (AI) Act is Now: A Practical Guide to Emotion Recognition Systems Under the AI Act \- WILLIAM FRY, https://www.williamfry.com/knowledge/the-time-to-ai-act-is-now-a-practical-guide-to-emotion-recognition-systems-under-the-ai-act/