Assessment Automation - June 5, 2026 - 202606.1.0

Fixed

  • Resolved an issue that prevented users from adding additional respondents to an assessment when the original respondent remained assigned.

  • Resolved an issue that prevented the Edit section assignment link in the Edit details popover from working when accessed via the Context menu on the Assessments screen.

  • Resolved an issue that prevented the Discard draft button from displaying when viewing an assessment template in Draft status, due to a spelling error in the permission name.

  • Resolved an issue that caused a message to incorrectly display claiming OneTrust Copilot could not find related assessments to generate an answer, even when uploaded documents and existing answers were available.

  • Resolved an issue that caused the AI auto-responses for assessments feature to suggest responses to Object attribute questions, even though this question type is not supported.

Existing Public Preview Features

Custom Notifications for Assessment Templates

Send customized, trigger-based automated email messages from a new global Notifications tab on the Assessment templates screen. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see Configuring Custom Email Notifications on Assessment Templates. This feature is related to the following ideas: OT-I-949, OT-I-1270, OT-I-3522, OT-I-7945, and OT-I-16348.

Configuring Approver-only Assessment Sections

Configure approver-only sections on assessments automatically using template rules or inventory-based values. These enhancements mean users can launch assessments with approver-only sections directly from the self-service portal.

For more information, see Configuring Approver-only Assessment Sections. This feature is related to the following ideas: AA-I-293 and AA-I-302.

Leveraging AI Auto-responses for Assessments

Opt-out of automatically scanning your three most recent assessments, plus add more files, more file types, and bigger files to your uploads. These enhancements improve the performance and accuracy of the AI Doc Scanner.

For more information, see Leveraging AI Auto-responses for Assessments.

Privacy Risk Agent

|Available with Solution Packaging Only

Leverage our Privacy Risk Assessment Agent in Copilot to streamline the creation of processing activities and the completion of assessments. This agent dramatically reduces the time and manual effort required to complete PIAs, improves accuracy through semantic matching and document-based autofill, and provides transparent confidence scoring, which enables Privacy Managers to complete assessments faster, more consistently, and with greater confidence.

For more information, see OneTrust Privacy Risk Assessment Feature Guide.

Launch Reassessments as Not Started

Configure reassessments to default to the Not Started stage upon launching. This enhancement applies to copied assessments, reassessments launched via automation rules, and reassessments launched via API.

Company Names in Email Notifications

Display your company name in assessment email notification templates using the __TenantName__ email variable when notifying users. This enhancement enables you to provide assessment notifications on behalf of your organization that reflect your tenant's name.

For more information, see Customizing Assessment Email Templates Using Dynamic Variables.

Template Updates

OneVendor Full v6.4 Change Log

The Oklahoma Consumer Personal Data Privacy Act establishes a comprehensive framework governing the processing of personal data of Oklahoma residents, setting clear requirements for transparency, purpose limitation, and accountability. It imposes core controller obligations such as transparency (privacy notices), data minimization, security safeguards, and consent for processing sensitive data. Processor duties, contractual requirements, and data protection assessments are also required, broadly aligning with other U.S. state privacy frameworks. The law also grants consumers enforceable rights over their personal data. Customers interested in compliance with this framework are impacted by this release.

The following is the change log for this release:

  • The Welcome Text was updated to account for the Oklahoma Consumer Data Privacy Act.

  • Added a new answer option to question 3.1 to account for the newly introduced framework.

  • Added a new answer option to question 3.3.

  • Created a new Vendor Contract (US) rule.

  • Updated conditional logics throughout the template to account for the newly introduced framework.

OneVendor Lite v6.4 Change Log

The Oklahoma Consumer Personal Data Privacy Act establishes a comprehensive framework governing the processing of personal data of Oklahoma residents, setting clear requirements for transparency, purpose limitation, and accountability. It imposes core controller obligations such as transparency (privacy notices), data minimization, security safeguards, and consent for processing sensitive data. Processor duties, contractual requirements, and data protection assessments are also required, broadly aligning with other U.S. state privacy frameworks. The law also grants consumers enforceable rights over their personal data. Customers interested in compliance with this framework are impacted by this release.

The following is the change log for this release:

  • The Welcome Text was updated to account for the Oklahoma Consumer Data Privacy Act.

  • Added a new answer option to question 2.3 to account for the newly introduced framework.

  • Updated conditional logics throughout the template to account for the newly introduced framework.

OnePIA (Full) - 7.5 Change Log

The Oklahoma Consumer Personal Data Privacy Act establishes a comprehensive framework governing the processing of personal data of Oklahoma residents, setting clear requirements for transparency, purpose limitation, and accountability. It imposes core controller obligations such as transparency (privacy notices), data minimization, security safeguards, and consent for processing sensitive data. Processor duties, contractual requirements, and data protection assessments are also required, broadly aligning with other U.S. state privacy frameworks. The law also grants consumers enforceable rights over their personal data. Customers interested in compliance with this framework are impacted by this release.

Also, this release brings the existing Connecticut content in this questionnaire in line with bill SB1295, which enters into force in July 2026 and amends the CTDPA. Customers interested in compliance with this framework are impacted by this release. The following is the change log for this release:

  • The Welcome Text was updated to account for the Oklahoma Consumer Data Privacy Act.

  • Updated conditional logics throughout the template to account for the addition of the jurisdiction listed above.

  • Updated question 3.1 on applicable laws.

  • Updated conditional logics of question 4.37.

  • Updated conditional logics of question 5.14.

  • Updated conditional logics of question 6.16.

  • Fixed conditional logics of question 6.6.

  • Updated friendly title, conditional logics, and description text of question 6.12.

  • Updated description text of question 7.9.

  • Updated conditional logics of questions 8.2 to 8.6.

  • Created new question 6.11 - Rights Related to Profiling.

  • Created new question 8.10 - Reasonable Expectations of the Consumer(s) (US).

  • Created new question 8.11 - Relationship With the Consumer(s) (US).

  • Created new question 8.12 - De-identified Data Processing (US).

  • Created new ‘Data protection assessment content requirements (US)’ rule.

  • Updated ‘High Risk (US)’ rule.

  • Updated ‘Privacy Rights’ rule.

OnePIA (Lite) - 7.5 Change Log

The Oklahoma Consumer Personal Data Privacy Act establishes a comprehensive framework governing the processing of personal data of Oklahoma residents, setting clear requirements for transparency, purpose limitation, and accountability. It imposes core controller obligations such as transparency (privacy notices), data minimization, security safeguards, and consent for processing sensitive data. Processor duties, contractual requirements, and data protection assessments are also required, broadly aligning with other U.S. state privacy frameworks. The law also grants consumers enforceable rights over their personal data. Customers interested in compliance with this framework are impacted by this release.

  • The Welcome Text was updated to account for the Oklahoma Consumer Data Privacy Act.

  • Updated question 1.2 on applicable laws.

  • Added new answer options to question 4.2 on privacy rights.

  • Created new conditional logics in question 1.5 on high-risk activities.

  • Updated ‘Privacy Rights’ rule.

  • Updated ‘High Risk (US)’ rule.

Things to Know

About Known Defects

 

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.