The first-in-the-nation law in Colorado includes biological or brain data in the State Privacy Act, similar to fingerprints if the data is being used to identify people.
After all, the privacy of our mind may be the only privacy we have left.
Next up in the dystopian cyberpunk pipeline: in-brain data encryption technology with a programmed tamper killswitch. Like that shit in the movie "Elysium".
If it could identify you or be used for identification purposes it will fall into at least CAs personal information/biometric information definition I believe…