Legal
Data Policy
PsyLattice is being designed to separate psychological information according to its purpose, ownership, permissions and authorised use.
Data separation
Personal, research and clinical workflows are designed as distinct environments. Information should not automatically move between these environments simply because they exist within the same platform.
Personal assessment data
Self-assessment and monitoring information belongs within the user's personal workspace unless the user explicitly participates in an authorised sharing or research workflow.
Research data
Research information should be handled according to the study protocol, participant consent, institutional requirements and appropriate ethical approval.
Professional access
Professional access to individual information should require both appropriate professional authorisation and an established basis for accessing that individual's information.
Data exports
Export capabilities should respect workspace permissions and applicable privacy controls. Research exports should support appropriate pseudonymisation or de-identification workflows where required.
Sensitive information
Psychological assessment and health-related information may be sensitive. PsyLattice therefore requires stronger governance than an ordinary consumer website before such information is processed at production scale.