Colorado, California, and Montana have passed neural data privacy laws meant to prevent the exploitation of brain information collected by consumer products.