Research on the use and protection of Brain-Computer Interface (BCI) data can help provide clear guidance for reasonable utilization of data in the BCI industry. The data collected by BCI devices originates from users'' brain information, which involves sensitive personal information and privacy of users. In the process of using BCI data, it is crucial to clarify usage boundaries, safeguard the personal information rights and privacy rights of data subjects, and prevent data security incidents. To balance the relationship between the development of the BCI industry and data protection, it is necessary to develop a dynamic informed consent mechanism for BCI data collection, reasonably delineate restrictive usage boundaries for BCI data, and ensure the security of BCI data processing activities through external supervision mechanisms.