Compliance Automation - April 2, 2026 - 202604.1.0

Fixed

• Resolved an issue that caused completed evidence to continue to display assigned actions.

Existing Public Preview Features

Evidence Task Review Workflow

Enable a default workflow for evidence task intervals when a reviewer is assigned. This enhancement introduces a structured set of stages to track the lifecycle of evidence, while also supporting notifications and task creation to keep teams informed and on track.

Note:

The Evidence Task Approval Bypass permission is required to allow evidence task assignees to bypass approval stages and send an evidence task interval to be collected.

Standard / Control Framework Changes

NIST SP 800-53 Updated from Release 5.1.1 to Release 5.2

NIST has issued Release 5.2 of Special Publication 800-53, Security and Privacy Controls for Information Systems and Organizations, updating the framework to strengthen the security and reliability of software updates and patches. According to NIST, this revision was made in response to Executive Order 14306 and focuses on software and system resiliency by design, developer testing, update deployment and management, and software integrity and validation.

We have updated our NIST SP 800-53 framework on the OneTrust platform from Release 5.1.1 to Release 5.2 to reflect these changes. The update includes newly added controls and control enhancements, revisions to certain existing control requirements, and updates to control guidance section that provide additional implementation examples.

For more information, see Supported Control Frameworks.

India Digital Personal Data Protection Act (DPDPA) 2025 Rules Updated

Framework content has been updated to align with the Digital Data Protection Rules, 2025, issued by India’s Ministry of Electronics and Information Technology (MeitY), which operationalize the Digital Personal Data Protection Act, 2023. The Rules introduce detailed, enforceable requirements across notice and consent, data principal rights, breach notification and consent manager obligations.

Customers can review and accept these updates through the Framework Updates functionality within the Standards & Frameworks library.

Important:

The updated India Digital Personal Data Protection Act (DPDPA) (2025) framework will be available on the OneTrust platform on April 6, 2026.

For more information, see Supported Control Frameworks.

Things to Know

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.