Privacy Controls
- Data minimization by workflow
- Purpose-based access controls
- Deletion/export requests self-service
- Breach response workflow mapped to FTC Health Breach Notification Rule
- State privacy controls including CPRA requests
Lya Patient Hub
Privacy & Consent
Manage your consent preferences and understand your privacy rights
Consent Preferences
| Consent | Status | Last Updated |
|---|---|---|
| Data usage for support operations | Accepted | Jan 9, 2026, 5:31 PM |
| Use of GenAI assistant | Accepted | Jan 9, 2026, 5:33 PM |
| Share reports with healthcare professional | Accepted | Jan 9, 2026, 5:34 PM |
| Device integration permissions | Declined | Jan 9, 2026, 5:35 PM |
| Marketing communications | Withdrawn | Feb 1, 2026, 3:20 PM |
Security Measures
- TLS 1.2+ for all traffic
- AES-256 at-rest encryption
- RBAC with least privilege
- SOC 2 Type II cloud controls
- Quarterly penetration test program
- Documented incident response workflow
Governance
- MLR approval status with content versioning
- Label update SLA: <= 48 hours
- Content expiration alerts
- Immutable audit trail for consent and safety events
Your Rights
Right to Access
Request a copy of all personal data Lya holds about you.
Right to Delete
Request deletion of your personal data (subject to legal retention requirements).
Right to Withdraw Consent
Withdraw any consent at any time without affecting prior lawful processing.
Right to Correct
Request correction of inaccurate personal information at any time.