Assessment Automation - September 25, 2026 - 202609.2.0

Fixed

  • Resolved an issue that incorrectly displayed the Add rule button on data risk assessment templates when the template was not in Draft status.

  • Resolved an issue that prevented Yes/No question responses from translating correctly when templates were imported with capitalized response values.

  • Resolved an issue that caused a network error message to display, preventing users from accessing control assessments.

  • Resolved an issue that caused responses to attribute questions to lose formatting and merge into a single paragraph when exported to a PDF report.

  • Resolved an issue that prevented the View issue popover from displaying with correct alignment and scrolling support.

  • Resolved an issue that prevented the template service from starting in On-Premises environments.

  • Resolved an issue that prevented the Send button from displaying for users with custom roles when trying to send an information request within an assessment.

  • Resolved an issue that prevented users from updating incident assessments when copying and pasting content from external sources into the text editor.

  • Resolved an issue that caused the Assessment creator to be incorrectly assigned as the Record admin when launching assessments from the Self-Service Portal in Attribute-Based Access Control (ABAC)-enabled tenants.

    addendum: This release note was added on October 2, 2026.

  • Resolved an issue that caused the Revert back to AI answer button to be incorrectly enabled for attribute-type questions and return an error when clicked.

  • Resolved an issue that prevented AI-suggested responses from populating for attribute-type questions when accepted on an assessment.

  • Resolved an issue that prevented assessments created via template action rules from correctly updating to the latest template version.

  • Resolved an issue that allowed manual assessment reminders to be sent without a selected approver scope, which prevented intended approvers from receiving the reminder.

  • Resolved an issue that prevented changes to the Disable notification toggle from being saved when customizing email notifications via Global Settings.

    addendum: This release note was added on October 2, 2026.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Privacy Automation.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Privacy Automation.

Privacy Risk Agent

|Available with Solution Packaging Only

Leverage our Privacy Risk Agent in Copilot to streamline the creation of processing activities and the completion of assessments. This agent dramatically reduces the time and manual effort required to complete PIAs, improves accuracy through semantic matching and document-based autofill, and provides transparent confidence scoring, which enables Privacy Managers to complete assessments faster, more consistently, and with greater confidence.

For more information, see OneTrust Privacy Risk Assessment Feature Guide.

Launch Reassessments as Not Started

Configure reassessments to default to the Not Started stage upon launching. This enhancement applies to copied assessments, reassessments launched via automation rules, and reassessments launched via API.

Company Names in Email Notifications

Display your company name in assessment email notification templates using the __TenantName__ email variable when notifying users. This enhancement enables you to provide assessment notifications on behalf of your organization that reflect your tenant's name.

For more information, see Customizing Assessment Email Templates Using Dynamic Variables.

Template Updates

AI Intake Assessment Lite v1.1 Change Log

  • Added a new answer option to question 1.8 ('Generation of non-consensual sexual and intimate content or child sexual abuse material').

Things to Know

Assessment submissions and approval actions now validate for date consistency and HTML safety. The platform now returns specific error codes and highlights affected questions and sections in theAssessmentsscreen when validation fails.

Names and tags containing special or unified characters now display correctly on list screens.

Legacy Sharing vs ABAC Sharing

OneTrust is planning to transition customers from the legacy sharing experience to Attribute-Based Access Control (ABAC) sharing for Inventory objects. ABAC provides a more consistent and scalable access model, supports Assets, Processing Activities, Entities, Vendors, and Projects, and offers more advanced access-control options. 

If your tenant currently uses Legacy Share, your existing sharing configuration will continue to work until you are ready to transition. The migration is not automatic, and Legacy Share continues to take precedence for Inventory objects where both sharing models are available. Review your current sharing setup and discuss readiness with your stakeholders; when you are ready, contact your Customer Success Manager or support representative to coordinate the migration.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.