EEG recordings can retain person-specific signatures after de-identification, prompting researchers to develop stronger privacy-preserving methods.