Settings & Administration - September 4, 2026 - 202609.1.0

General Availability

Workflow List Table Experience Updates

Workflow list tables have been enhanced across supported products to deliver a more consistent and intuitive table experience. This update includes:

  • Visible ascending and descending sort arrows to make sort direction easier to recognize at a glance

  • A column picker that gives users more control over which columns are displayed in the table

  • A repositioned Context menu on the left side of the table to support a more consistent and easier-to-find interaction pattern

These enhancements will be available for the following products, refer to their release notes for impacted workflows:

  • AI Governance

  • Audit Management

  • Enterprise Policy Management

  • Incidents

  • IT Risk Management

Send Notifications to User Groups

Select a group in the assignee field of a Send notification rule action. This helps route workflow notifications to all relevant team members across standard workflows.

This enhancement will be available for the following products, refer to their release notes for impacted workflows:

  • AI Governance

  • Audit Management

  • Enterprise Policy Management

  • Incidents

  • IT Risk Management

Assign Tasks Using User-Type Attributes

Assign tasks with the Create task stage rule action to either system users or eligible single-select, user-type attributes. This workflow update allows you to dynamically route tasks to the right users while preserving existing task-assignment behavior.

This enhancement will be available for the following products, refer to their release notes for impacted workflows: 

  • AI Governance

  • Audit Management

  • Enterprise Policy Management

  • Incidents

  • IT Risk Management

Table Enhancements for Global Settings

Tables and table functionalities within Global Settings have been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs. Tables have been updated on the following screens:

Note:

Select tables across Global Settings may support these enhancements while others may not. These updates will continue to roll out incrementally.

For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Fixed

  • Resolved an issue that caused a blank page to display during service provider-initiated, Single Sign-On (SSO) logins when using the POST option for Response and Request binding types.

  • Resolved an issue that prevented user list exports from completing when initiated from child organizations.

  • Resolved an issue that enabled notifications for email templates in the sandbox tenant when they were disabled in the parent tenant when performing a sandbox copy.

  • Resolved an issue that prevented failed emails from resending on the Email account details screen.

    addendum: This release note was added on September 11, 2026.

  • Resolved an issue that caused users to be redirected to the home screen when selecting the Bulk launch assessment button from the Controls screen after the Attribute-Based Access Control (ABAC) feature was enabled.

    addendum: This release note was added on September 11, 2026.

  • Resolved an issue that prevented engagements from displaying on the Engagements list screen for users assigned via custom single-select attributes in Attribute-Based Access Control (ABAC) assignments.

    addendum: This release note was added on September 11, 2026.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by adding more granular control over who can access specific records and what actions they can perform. Rather than granting access to all records within a solution, ABAC uses assignments and attributes to determine which records a user can access and what permissions they have on those records, helping organizations implement least-privileged access more effectively.

ABAC Phase 1: Foundations is available for supported objects across AI Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management, and introduces the following core capabilities to manage record-level access and collaboration:

Basic Role

: Use the new minimal-access Basic role available on theRolesscreen to configure users with access only to the OneTrust Platform homepage, supporting least-privileged access from the start.

Assignments

: Leverage out-of-the-box or custom assignments, which are sets of permissions that define what users can do on a record. Assignments can be applied through record sharing or inherited through user attributes and workflow stages to automatically grant record-level permissions for owners, approvers, reviewers, and other users involved in the record lifecycle.

Sharing, Requesting & Managing Access

: Share records directly with users, request access to records, review who currently has access, and modify or revoke access as needed.

Record-Level Auditing

: Review audit history for record access and assignment configuration changes to understand what changed, who made the change, and when the change occurred.

ABAC helps organizations manage access more precisely by aligning permissions to records and assignments rather than relying on increasingly complex role structures. This enables granular record-level access control, improves governance, and simplifies collaboration across teams and workflows. With this enhancement, administrators can reduce access-management complexity while strengthening security and accountability across the OneTrust Platform.

For more information, see Attribute-Based Access Control (ABAC) User Guide. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0, with support initially available for a subset of objects and functionality. Additional capabilities and object support will be introduced in future releases through ABAC Phase 2: Dynamic Access.

OneTrust Activity Log

Gain a unified, real-time view of user and system audit events across the OneTrust Platform with the Activity logs screen to increase visibility and control, investigate issues faster, and meet compliance requirements with a complete, traceable audit trail. Through a centralized audit experience, teams can quickly search and filter audit records, monitor activity across solutions from a single location, and export audit data for broader reporting and analysis.

For more information, see OneTrust Activity Log.

Privacy Risk Agent

|Available with Solution Packaging Only

Leverage our Privacy Risk Agent in Copilot to streamline the creation of processing activities and the completion of assessments. This agent dramatically reduces the time and manual effort required to complete PIAs, improves accuracy through semantic matching and document-based autofill, and provides transparent confidence scoring, which enables Privacy Managers to complete assessments faster, more consistently, and with greater confidence.

For more information, see OneTrust Privacy Risk Assessment Feature Guide.

SCIM Users and Groups Integrations

Utilize the Integrations module to configure triggers and actions for SCIM Users and Groups. This feature allows users to automate their organization's processes when managing user and group information using SCIM APIs.

For complete details on these workflow options, see Managing Custom Integration Workflows.

New Root Organization

Create a new root organization at the top of an existing organizational hierarchy using the new Set as the Root Organization check box on the Add Organization modal. This feature allows you to move an existing organizational structure, along with certain previously configured settings, under a new root organization.

For more information, see Managing Organizations.

Integrate Tasks with External Systems

Manage tasks created within the application across external systems by creating integration workflows using the following new integration events:

  • Task Add Attachment

  • Task Add Comment

  • Task Created

  • Task Deleted

  • Task Remove Attachment

  • Task Updated

This enhancement allows you to manage tasks across external systems, which may be helpful when addressing tasks that require a large volume of actions.

For more information, see Integrating Tasks with External Systems.

Things to Know

Platform Enhancements

OneTrust has updated the font used throughout the platform to improve readability, visual consistency, and the overall user experience. This is a visual enhancement only and does not affect platform functionality or workflows.

Note:

Additional visual enhancements will be introduced in upcoming releases as part of ongoing platform improvements.

Legacy Sharing vs ABAC Sharing

OneTrust is planning to transition customers from the legacy sharing experience to Attribute-Based Access Control (ABAC) sharing for Inventory objects. ABAC provides a more consistent and scalable access model, supports Assets, Processing Activities, Entities, Vendors, and Projects, and offers more advanced access-control options. 

If your tenant currently uses Legacy Share, your existing sharing configuration will continue to work until you are ready to transition. The migration is not automatic, and Legacy Share continues to take precedence for Inventory objects where both sharing models are available. Review your current sharing setup and discuss readiness with your stakeholders; when you are ready, contact your Customer Success Manager or support representative to coordinate the migration.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.