Compliance Automation - June 26, 2026 - 202606.2.0

Fixed

  • Resolved an issue that prevented users from previewing PDF attachments after clicking the file link on the Evidence interval details pane.

  • Resolved an issue that prevented users from deleting evidence attachments on evidence tasks with a one-time interval.

  • Resolved an issue that prevented users from downloading evidence attachments on the Evidence interval details pane.

  • Resolved an issue that prevented the Source column on the Controls tab of the Initiative details screen from sorting correctly.

Existing Public Preview Features

Stage & Workflow Rules for Seeded Evidence Interval Workflows

Add stage and workflow rules to the seeded evidence interval workflows to automatically send notifications, change evidence task stages, and change workflows. This enhancement allows organizations to tailor workflows and approval paths to match their evidence review processes and customize existing seeded workflows for greater flexibility.

For more information, see Adding Stage Rules to Evidence Interval Workflows and Adding Workflow Rules to Evidence Interval Workflows.

Standard / Control Framework Changes

New Oklahoma Consumer Data Privacy Act Framework Added

The Oklahoma Consumer Data Privacy Act (OKCDPA), effective January 1, 2027, establishes a comprehensive data privacy framework and mandates transparency and consumer rights regarding personal data collected by for-profit entities conducting business in Oklahoma.

We’ve made implementing the OKCDPA easy by offering the framework on our platform and ensuring users can benefit from its overlap with other frameworks that exist on our platform. The platform contains survey questions to help you define scope that will bring all relevant controls, control implementation guidance, and evidence tasks (including guidance) to help you in meeting the requirements of the OKCDPA.

For more information, see Supported Control Frameworks.

New NIS2 Germany Framework Added

Germany’s NIS2 Implementation Act, effective December 6, 2025, transposes the EU NIS2 Directive into German law and strengthens cybersecurity requirements for essential, important, and critical entities operating in Germany. The framework introduces obligations relating to cybersecurity risk management, incident reporting, governance oversight, registration with the Federal Office for Information Security (BSI), and supply chain security.

We’ve made implementing NIS2 Germany easier by offering the framework on our platform and ensuring users can benefit from its overlap with other cybersecurity and information security frameworks that exist on our platform. The platform contains survey questions to help define scope and bring in all relevant controls, control implementation guidance, and evidence tasks, including guidance, to support compliance with Germany’s NIS2 requirements.

Note:

The NIS2 Germany Framework will be available on the OneTrust platform on July 3rd, 2026.

For more information, see Supported Control Frameworks.

Permissions

Things to Know

TheEvidence Approverfield has been added to theUpdate evidence task implementationsbulk import template, making it easier to assign approvers in bulk and improve workflow efficiency.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.