Consumer Neuroscience Foundations

12 canonical consumer-neuroscience primitives for product, content, interface, and retention design. Each primitive is domain-agnostic and ethically bounded. Primitives 1–8 cover engagement-time neural responses (salience, arousal, bonding, narrative, regulatory orientation, social mirroring, aesthetics, interoception). Primitives 9–12 cover temporal and predictive mechanisms (memory consolidation, reward anticipation, embodied cognition, predictive processing). Primitive #10 (reward anticipation, Berridge "wanting" vs "liking") is intentionally distinct from foundations-behavioral-economics primitive #13 (reinforcement schedules / dopamine prediction-error): that skill covers schedule-of-reinforcement design; this skill covers anticipatory dopamine as a separate design lever — countdown UX, drop reveals, daily-card open, pre-purchase excitement. Primitive #12 (predictive processing & active inference) is the unifying primitive that grounds attention (#1), interoception (#8), and narrative (#4) under one prediction-error-minimization frame: the brain continuously generates predictions; violations of priors incur a prediction-error cost that must be "earned" by the design.

Ethical obligation: every primitive in this skill operates on pre-conscious or sub-deliberative neural systems. The manipulation risk is higher than for behavioral-economics nudges, because users cannot easily introspect on the mechanism. Read the Misuse Boundary subsection in each playbook before applying any technique. The test from Thaler and Sunstein: "Would you be embarrassed if the technique appeared on the front page of a newspaper?" If yes, it is exploitation, not design. The DMCC Act 2024, in force from 6 April 2025, makes online choice architecture and dark patterns directly actionable by the CMA with fines up to 10% of global annual turnover.

When to Apply

Apply consumer-neuroscience when:

• Attention/salience design — first-7-second hook, visual hierarchy, modal vs inline
• Anxiety-driven engagement loops (cosmic, dating, status apps) — needs DMCC ethical audit
• Parasocial / narrative-led conversion (creator content, branded characters)
• Daily-cadence retention with timing-sensitive triggers (consolidation windows, wake-time)
• Trust repair, reciprocity, or oxytocin-bond design in social/community products

Skip and use simpler alternatives when:

• Pure pricing/defaults/anchoring question — foundations-behavioral-economics is sufficient and cheaper
• Audience has no measured anxiety/arousal/attention baseline — neuro framing is decoration, not insight
• B2B SaaS with rational-buyer mode dominant — emotional primitives mostly noise; use behavioral-econ + decision-theory
• The proposed mechanism manipulates without genuine user benefit — fails DMCC Act 2024 ethical gate; do not ship
• Required signals (eye-tracking, GSR, fMRI) aren't available AND no biomarker proxy exists — claim is unfalsifiable
• Causal lift question — use foundations-causal-inference to measure; neuro primitives suggest mechanisms, not effect sizes

Contents

• Quick Reference
• Primitive Index
• Formal Supporting Theory
• Ethical Bounds
• Misuse Boundaries
• Decision Checklist
• Anti-Patterns
• Composition Recipes
• Knowledge Base & Operational Guides
• Workflow
• ASCII Flow
• Navigation
• Related Skills
• Fact-Checking

---

Quick Reference

#	Primitive	Core Property	When to Use
1	Attention & Salience	Bottom-up capture via contrast/novelty; top-down via relevance	Any surface where visibility or engagement priority matters
2	Arousal Physiology	Yerkes-Dodson inverted-U; autonomic cost; GSR as engagement signal	Engagement loop design; onboarding intensity calibration
3	Social Bonding	Oxytocin-driven affiliative response; trust formation	Trust mechanics, warmth signals, share/referral features
4	Narrative Transportation	DMN + vmPFC + ventral striatum absorb self-referential story	Personalized content, horoscopes, product storytelling
5	Approach-Avoidance & BIS/BAS	BAS drives promotion seeking; BIS drives prevention vigilance	Copy tone for mixed-orientation audiences; funnel segmentation
6	Mirror Systems & Emotional Contagion	FFA + MNS simulate observed emotional states	Testimonial design, UGC placement, avatar/face elements
7	Neuroaesthetics	Visual beauty response via peak-shift, contrast, symmetry	Visual hierarchy, brand asset design, landing page aesthetics
8	Interoception & Somatic Markers	Insular cortex body-state signals bias decisions before deliberation	Wellness/anxiety product design; gut-feel purchase triggers
9	Memory Consolidation	Hebbian potentiation + sleep replay strengthen traces	Notification timing, streak design, recall-based content
10	Reward Anticipation	VTA dopamine onset ~200ms before reward; wanting distinct from liking	Countdown UX, drop reveals, daily unlock mechanics
11	Embodied Cognition	Sensorimotor grounding of abstract concepts; body-state metaphors	Copy language, spatial UI metaphors, product texture cues
12	Predictive Processing & Active Inference	Brain minimizes free energy by updating predictions; violations cost attentional budget	Feature reveals, onboarding surprises, brand consistency

---

Primitive Index

Each primitive has a full playbook: Definition / When to use / Misuse boundary / Inputs / Outputs / Failure modes / Worked example / Sources.

#	Primitive	Failure Mode It Addresses
1	Attention & Salience	Designs that assume attention is granted, not earned
2	Arousal Physiology	Engagement loops that ignore stress cost on the user
3	Social Bonding	Trust/share mechanics built without warmth signals
4	Narrative Transportation	"Personal-feeling" content reduced to facts and lists
5	Approach-Avoidance & BIS/BAS	Single-tone funnels for mixed promotion/prevention users
6	Mirror Systems & Emotional Contagion	Testimonials and UGC ignored as conversion lever
7	Neuroaesthetics	Aesthetic choices justified by taste, not neural response
8	Interoception & Somatic Markers	"Gut-feel" decisions ignored as design surface
9	Memory Consolidation	Reminders and streaks that fight consolidation timing
10	Reward Anticipation	Anticipation phase ignored in favor of payoff
11	Embodied Cognition	Copy and UI ignoring body-state metaphors
12	Predictive Processing & Active Inference	Surprises that violate user priors without earning the prediction-error budget

---

Formal Supporting Theory

Theory Area	Use When	Applied Primitives It Grounds
Attention theory (Feature Integration Theory, salience maps)	Need to predict what captures or loses user attention	#1
Psychophysiology & autonomic regulation (Yerkes-Dodson, allostatic load)	Need to calibrate engagement intensity without imposing stress cost	#2
Social neuroendocrinology (oxytocin system, affiliative circuits)	Need to understand trust formation or prosocial behavior in product	#3
Narrative cognition & Default Mode Network (DMN, vmPFC, ventral striatum)	Need to design self-referential or immersive content	#4
Regulatory focus & BIS/BAS (Higgins, Carver & White)	Need to distinguish promotion-oriented from prevention-oriented users	#5
Mirror neuron system & emotional contagion (MNS, FFA)	Need to understand social simulation in testimonials or face-based UI	#6
Neuroaesthetics (peak-shift, symmetry, contour, reward from visual beauty)	Need to explain or predict aesthetic preference and visual reward	#7
Interoception & somatic marker theory (Craig insular cortex, Damasio vmPFC)	Need to account for body-state signals in purchase or risk decisions	#8
Systems memory consolidation & sleep-dependent replay (Hebbian, hippocampal-neocortical transfer)	Need to design for durable trace formation — not just exposure	#9
Incentive salience & wanting vs liking (Berridge mesolimbic dopamine, VTA)	Need to distinguish anticipatory drive from hedonic reward	#10
Embodied / grounded cognition (Lakoff & Johnson, Barsalou)	Need to align copy or UI metaphors with sensorimotor experience	#11
Predictive processing & active inference (Friston free energy, Clark, Constant)	Need to manage prediction-error budget: when to surprise, when to confirm	#12

Use references/formal-theory-map.md when the task needs source assumptions, ethical boundaries, or a distinction between observed neural response and normative welfare.

---

Ethical Bounds

The Harm Test

A neural design technique is legitimate if it:

1. Steers users toward experiences or decisions they would endorse on reflection.
2. Can be easily overridden or opted out of.
3. Does not exploit pre-conscious neural mechanisms to act against the user's interests.

The same lever — arousal, oxytocin warmth, reward anticipation — can be legitimate or manipulative depending on whether the underlying offer genuinely serves the user.

Manipulation vs Legitimate Design

Dimension	Legitimate	Manipulation
Transparency	Mechanism can be disclosed without destroying the effect	Requires concealment of mechanism to work
User-benefit alignment	Steers toward user's own stated goals or wellbeing	Overrides user goals in favor of operator revenue
Reversibility	Easy to disengage, unsubscribe, or undo	Designed to make exit costly or invisible
Signal honesty	Arousal, urgency, or warmth reflects real content	Signal is manufactured (fake countdown, artificial scarcity, paid "warmth")
Regulatory posture	Survives CMA/ASA/ICO scrutiny	Attracts DMCC Act enforcement action

UK Regulatory Context (August 2026)

DMCC Act 2024 entered into force 6 April 2025, revoking the CPRs 2008 outright (s.251(1), commenced by SI 2025/272) and succeeding them with ss. 226 (misleading actions), 227 (misleading omissions), and 228 (aggressive practices), plus the Sch. 20 list of banned practices. The successor provisions are redrafted, not a restatement — old CPRs regulation numbers do not map across cleanly, so cite DMCC sections. The CMA has direct civil-enforcement power and can fine up to 10% of global annual turnover without requiring a court order.

Enforcement is now live, not prospective — the first two infringement decisions both concerned online choice architecture rather than advertising content:

• 18 November 2025: CMA opened its first DMCC enforcement actions against 8 firms (drip pricing, default opt-ins, pressure selling) and issued approximately 100 advisory letters across 14 sectors.
• 18 June 2026: second infringement decision — Marks Electrical fined £720,000 (£1.2m reduced 40% for early settlement) and ordered to refund ~£600,000 to ~40,000 customers, for pre-selected extra charges (customers auto-opted into paid recycling and unwrapping services). Conduct covered April–November 2025. This is the clearest signal of the enforcement floor: a mid-size retailer, a single default-opt-in pattern, a seven-figure headline penalty plus consumer redress.

April 2025: CMA published procedural guidance on DMCC enforcement. December 2025: CMA published price transparency guidance under DMCC.

Online Choice Architecture (dark patterns) now directly actionable under DMCC, including:

• Confirm-shaming (manipulative framing on decline options)
• Pre-ticked defaults that benefit the operator at user expense
• Drip pricing (incremental price reveal late in purchase flow)
• False urgency ("Only 2 left!" when stock is unconstrained)
• Forced continuity (auto-renew without prominent disclosure)

Secondary regulatory anchors:

• ASA CAP Code: misleading advertising, fabricated testimonials, manufactured social proof
• DMCC Act 2024 s.228 (aggressive practices — replaced CPRs 2008 Reg. 7, revoked 6 April 2025)
• UK GDPR: biometric and neuro-physiological signal capture (GSR, HRV, eye-tracking, fNIRS) constitutes special-category data in many use cases; requires explicit consent and lawful basis (Article 9)

EU Regulatory Context (August 2026)

For products serving EU users, the EU AI Act is the parallel anchor to DMCC and applies on top of GDPR.

• Article 5 prohibitions in force from 2 February 2025: AI systems that deploy "subliminal techniques beyond a person's consciousness" or "purposefully manipulative or deceptive techniques" causing significant harm are prohibited outright. AI systems that exploit vulnerabilities (age, disability, socio-economic situation) are also prohibited. This directly captures the manipulation column of the table above when AI is in the loop. Unaffected by the 2026 delay below — the prohibitions bind now.
• Emotion-recognition prohibition (workplace and education): AI inference of emotions from facial expression, voice, GSR, HRV, or any biometric stream is prohibited in workplace and education contexts (Article 5). Commercial deployment outside those contexts is not prohibited but is regulated.
• High-risk classification DELAYED to 2 December 2027 (was 2 August 2026): the AI Digital Omnibus was published in the Official Journal 24 July 2026 and entered into force 27 July 2026, deferring standalone Annex III high-risk obligations — which include commercial emotion-recognition and biometric-categorisation systems — by 16 months. Annex I (AI embedded in products under EU product-safety law) moves to 2 August 2028. Providers and deployers must still meet data-governance, transparency, human-oversight, robustness, accuracy, and post-market monitoring requirements, but the compliance deadline is December 2027. Treat this as schedule relief, not repeal: systems in design now will ship into the regime.
• Article 50 transparency obligations remain on the original 2 August 2026 schedule — they were not delayed. Users exposed to emotion-recognition or biometric-categorisation systems must be explicitly informed, now. A four-month grace period (to 2 December 2026) applies only to the Article 50(2) watermarking duty for systems already on the market. This is the live EU obligation for affect-inference products as of August 2026.
• GDPR continues to apply: lawful basis (typically Article 9 explicit consent for biometric data) is a precondition; the AI Act adds requirements on top. GDPR is unaffected by the Omnibus delay and is the binding constraint in the interim.

For UK-only products, DMCC + UK GDPR are sufficient. For EU users or shared-stack products, both regimes apply and the stricter rule binds.

US Regulatory Context (August 2026)

Four states have enacted neural-data-specific privacy laws (Colorado, California, Montana, Connecticut), and nine further bills were introduced across six states in the first six weeks of 2026 alone (Alabama, California, Illinois, New York, Vermont, Virginia). Treat this as a live patchwork, not a settled regime.

Scope caution — these laws are narrower than "any biometric signal." Most define neural data as signals from the nervous system measured directly, and several explicitly exclude the downstream physiological signals this skill most often uses. Montana SB 163 carves out "nonneural information … the downstream physical effects of neural activity, including but not limited to pupil dilation, motor activity, and breathing rate" — which excludes GSR and eye-tracking. California SB 1223 requires neural data be "not inferred from nonneural information," likely excluding facial coding and voice affect. Colorado's definition reaches only data used for identification purposes, excluding most consumer applications. Connecticut has no explicit carve-out, leaving GSR and eye-tracking ambiguous there. Practical consequence: EEG and fNIRS are squarely in scope; GSR, HRV, eye-tracking, facial coding, and voice affect are mostly out of neural-data statutes — but remain covered by general state biometric/sensitive-data law, BIPA-style statutes, and GDPR for EU users. Do not use a neural-data-law exemption as a reason to skip consent; check the general privacy regime instead.

• California SB 1223 (effective 1 January 2025): amends CCPA to classify "neural data" (signals from central or peripheral nervous system, not inferred from nonneural information) as sensitive personal information. Opt-in consent required; right to delete and restrict sharing apply. Primary source
• Colorado HB 24-1058 (effective 7 August 2024): amends Colorado Privacy Act to include "neural data" within "biological data" as sensitive data. First US law to define and protect neural data. Scope limited to data used or intended for identification. Primary source
• Montana SB 163 (effective 1 October 2025): adds neurotechnology data to Montana's Genetic Information Privacy Act. The most extensive of the four: detailed express-consent requirements for collection, marketing and research use, disclosure, transfer, and sale — often requiring separate informed consent per purpose and per third party. Explicitly excludes nonneural downstream signals. If a product captures true neural data from US users, Montana sets the strictest operative bar.
• Connecticut SB 1295 (signed 24 June 2025; effective 1 July 2026): amends CTDPA to add neural data as a sensitive data category; processing requires express consumer consent; selling sensitive data without consent prohibited. Primary source
• Vermont H.814 / Act 101 (signed 18 May 2026; effective 1 July 2026): correction — do not overstate this law. As enacted, H.814 was substantially narrowed in the Senate: it recognises a largely declaratory statement of "neurological rights" (mental privacy, freedom of thought, non-discrimination in neurotechnology), but the consent requirement and private right of action were stripped before passage. Enforcement rests exclusively with the Vermont Attorney General; there is no consent gate for businesses. Its main forward hook is a commissioned study reporting to the next legislative session. Vermont's binding neural-data framework is Vermont S.71 (neural data as sensitive data), effective 1 January 2028 — track that bill, not H.814, for compliance planning. Treat H.814 as a signal of legislative direction, not a live consent gate. Primary source
• UNESCO Recommendation on the Ethics of Neurotechnology (adopted 12 November 2025): first global non-binding framework covering neural data across commercial uses. Non-binding but widely cited in board-level compliance discussions and DPA engagement. Primary source
• US MIND Act 2025 (proposed): would direct FTC to study neuromarketing as a named use case; not yet law but signals federal regulatory attention. Document FTC-readiness posture if product involves neuromarketing explicitly.

Practical implication: any product capturing genuine neural signal (EEG, fNIRS) from US users must run a per-state consent analysis — California CCPA sensitive PI from 1 January 2025, Montana's per-purpose express consent from 1 October 2025, Colorado and Connecticut in parallel. For GSR, HRV, eye-tracking, facial coding, and voice affect, the neural-data statutes mostly do not bite; the governing constraints are general sensitive-data and biometric law plus GDPR Article 9 for EU users. See references/ethics-operational-checklist.md US Neural Data Laws section.

Vulnerable-User Note

CMA enforcement priorities specifically name "aggressive sales practices which take advantage of vulnerability." Wellness, anxiety-relief, and astrology/spiritual audiences are explicitly in scope as vulnerability-risk contexts. EU AI Act Article 5 reinforces this with an outright prohibition on AI systems that exploit vulnerabilities of specific groups (age, disability, socio-economic situation) to materially distort behaviour. Any application in these categories must apply the stricter column of the manipulation table — not the middle ground. Manufactured urgency, oxytocin-proxy warmth without genuine care mechanics, and reward-anticipation loops targeting financially or emotionally vulnerable users are highest-risk under both regimes.

---

Misuse Boundaries