Assessment Automation - October 16, 2026 - 202610.1.0

General Availability

New Assessment Automation APIs

Added the following APIs to support assessment navigation, workflow actions, child question response submission, unanswered question retrieval, attachment management, assigned assessment retrieval, linked assessment retrieval, and assessment search capabilities:

• Get Assessment Question Section API

• Perform Assessment Workflow Action API

• Submit Child Question Responses API

• Get Next Assessment Question API

• Manage Assessment Question Attachments API

• Get List of Assigned Assessments API

• Get List of Linked Assessments by Entity ID API

• Search Assessments API

Enhancements to Assessment Automation APIs

Updated the Assessment Automation APIs with the following enhancements:

• Updated the Get Assessment API to support the include query parameter. This enhancement enables retrieval of additional assessment datasets, including information requests, notes, and stage history.

• Updated the Get Assessment API and Get Assessment Record API to return additional assessment insights and review information, including information request metrics and records, flagged question counts and identifiers, and the questionResponseReviewStatus response object for AI and human review statuses.

• Updated the Launch Assessment API to support the oneAgent query parameter for OneAgent-specific assessment launch scenarios.

• Updated the Set Primary Record API to support the following custom entity types: MODELS, AISYSTEMS, AIAGENTS, DATASETS, PROJECTS.

Table Enhancements for Assessment Automation

Tables and table functionalities on the Assessments tab of the screen have been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs.

For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Fixed

• Resolved an issue that caused assessments to display on both the Active and Completed tabs of the homepage when a user was assigned as both the respondent and the approver.

• Resolved an issue that prevented assessments from being exported as a PDF when created from a multilingual template containing multichoice questions with duplicate answer options.

• Resolved an issue that caused duplicate integration events to be triggered from a single assessment submission, resulting in the creation of a duplicate assessment.

• Resolved an issue that prevented assessment deadline reminder emails from being triggered after a deadline was updated.

• Resolved an issue that caused an error message to intermittently display when opening a custom email notification template after sorting the list on the Assessment templates screen.

New Public Preview Features

Information Request Data in Reports

You can now access information request data directly through reports. This enhancement streamlines tracking and analysis of requests without manual effort, and improves visibility and response times across your compliance workflows.

For more information, see Data Glossary for PIA & DPIA Automation Reports.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1: Foundations

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Privacy Automation.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Privacy Automation.

Privacy Risk Agent | Available with Solution Packaging Only

Leverage our Privacy Risk Agent in Copilot to streamline the creation of processing activities and the completion of assessments. This agent dramatically reduces the time and manual effort required to complete PIAs, improves accuracy through semantic matching and document-based autofill, and provides transparent confidence scoring, which enables Privacy Managers to complete assessments faster, more consistently, and with greater confidence.

For more information, see OneTrust Privacy Risk Assessment Feature Guide.

Launch Reassessments as Not Started

Configure reassessments to default to the Not Started stage upon launching. This enhancement applies to copied assessments, reassessments launched via automation rules, and reassessments launched via API.

Company Names in Email Notifications

Display your company name in assessment email notification templates using the __TenantName__ email variable when notifying users. This enhancement enables you to provide assessment notifications on behalf of your organization that reflect your tenant's name.

For more information, see Customizing Assessment Email Templates Using Dynamic Variables.

Template Updates

Things to Know

• You can now create rules during assignment creation in ABAC-enabled tenants to automatically assign the record admin. Rules support configuration based on specific values such as template or region and will ensure assessments have the correct owner from the start, reducing manual reassignment requirements.

• Duplicate answer options can no longer be created for multiple-choice questions within assessment templates.

• About Known Defects

  Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.