The NBA’s 2023 Collective Bargaining Agreement (CBA), effective through 2029-30, has transformed wearables from a bargaining novelty to a core component of biometric governance. The CBA broadly defines wearables and creates a joint Wearables Committee—composed of league and union representatives, including sports medicine experts, and governed by strict conflict-of-interest rules—to oversee device approval and establish cybersecurity standards for wearable data. Devices and metrics must be validated, and the use of raw data is tightly controlled. Player protections are paramount: wearable use is strictly voluntary, informed consent is required, and players can opt out at any time. Players have full access to their data, while teams may only use it for health, performance, and tactical purposes; biometric data is explicitly barred from influencing contract negotiations and employment decisions, with significant fines for violations. Despite these advances, the CBA does not fully settle legal questions of ownership or secondary commercialization of athlete data. Ongoing policy differences with the G League and continued academic debate highlight the need for stronger athlete data sovereignty, advocating for player control over personal data. While the CBA is an advanced framework for athlete protection and oversight, it remains an interim solution, leaving open the fundamental question of athlete authority over the commercial and inferential use of their biometric information.