Assessment Automation - September 4, 2026 - 202609.1.0

Fixed

  • Resolved an issue that prevented integration workflows from correctly evaluating assessment risk levels.

  • Resolved an issue that prevented users from exporting an assessment list when an Unassigned approver filter was applied.

  • Resolved an issue that prevented assessment notes configured as Visible to approver from being included in PDF exports.

  • Resolved an issue that excluded approval records without comments from assessment PDF exports.

  • Resolved an issue that partially truncated the SHOW option for show/skip logic on the Template details screen.

  • Resolved an issue that prevented Risk approver and Risk owner details from displaying in assessment PDF exports.

  • Resolved an issue that prevented control-related templates from displaying in the Template filter dropdown on the Assessments screen.

  • Resolved an issue that prevented the approver name and icon from updating immediately on the assessment header after the approver was edited.

  • Resolved an issue that prevented the open issues count indicator from displaying on the Assessment details screen for Third-Party Risk Management.

    addendum: This release note was added on September 11, 2026.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Privacy Automation.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Privacy Automation.

Privacy Risk Agent

|Available with Solution Packaging Only

Leverage our Privacy Risk Agent in Copilot to streamline the creation of processing activities and the completion of assessments. This agent dramatically reduces the time and manual effort required to complete PIAs, improves accuracy through semantic matching and document-based autofill, and provides transparent confidence scoring, which enables Privacy Managers to complete assessments faster, more consistently, and with greater confidence.

For more information, see OneTrust Privacy Risk Assessment Feature Guide.

Launch Reassessments as Not Started

Configure reassessments to default to the Not Started stage upon launching. This enhancement applies to copied assessments, reassessments launched via automation rules, and reassessments launched via API.

Company Names in Email Notifications

Display your company name in assessment email notification templates using the __TenantName__ email variable when notifying users. This enhancement enables you to provide assessment notifications on behalf of your organization that reflect your tenant's name.

For more information, see Customizing Assessment Email Templates Using Dynamic Variables.

Permissions

Things to Know

TheShareoption is now available from theContextmenu on theAssessmentscreen for Attribute-Based Access Control (ABAC)-enabled environments. You can now use theSharemodal to configure access and manage permissions without accessing the assessment directly.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.