A/76/380 law,202 such as by facilitating human rights impact assessments by independent actors; (e) Neurotechnology companies should ensure a robust, privacy-focused and human rights-compliant framework for the collection, processing and storage of neurodata. Consistent with privacy, informed consent must lie at the heart of neurodata collection and the participant must be able to revoke and delete their stored data at any time. Where possible, raw data should be processed “on-device” and not uploaded to company or third-party servers. __________________ 202 28/28 Human Rights Council resolution 47/23. 21-14191