Compliance Automation - September 4, 2026 - 202609.1.0

Fixed

  • Resolved an issue that caused the number of evidence tasks displayed on the Standards & frameworks screen to differ from the number of tasks shown in column reports.

  • Resolved an issue that displayed archived inventories as available for selection when creating an initiative.

  • Resolved an issue that prevented the Analyze evidence using AI option from appearing on the Add attachment modal for custom roles when collecting evidence.

  • Resolved an issue that prevented users from accessing evidence tasks via the Controls screen.

    addendum: This release note was added on September 11, 2026.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Tech Risk & Compliance.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Tech Risk & Compliance.

Restore Deleted Inventory Records

Restore deleted inventory items directly with the Inventory Restore Feature. Users can restore a single record or multiple records at once with bulk restore. When a record is recovered, the inventory item and supported associated data are also restored. This enhancement reduces the need for manual support intervention and helps teams recover records faster.

For more information, see Restoring Deleted Inventory Records.

Stage & Workflow Rules for Seeded Evidence Interval Workflows

Add stage and workflow rules to the seeded evidence interval workflows to automatically send notifications, change evidence task stages, and change workflows. This enhancement allows organizations to tailor workflows and approval paths to match their evidence review processes and customize existing seeded workflows for greater flexibility.

For more information, see Adding Stage Rules to Evidence Interval Workflows and Adding Workflow Rules to Evidence Interval Workflows.

Standard / Control Framework Changes

California Consumer Privacy Act (CCPA as amended) (2025) Framework Updated

Framework content has been expanded to include all requirements associated with Article 9 of the CPPA regulations governing annual cybersecurity audits. Every requirement within Article 9 is now represented by an associated control in the framework, providing comprehensive coverage of the regulation's cybersecurity audit obligations.

For more information, see Supported Control Frameworks.

Things to Know

TheDelete recordsbutton is now called theRecycle binbutton on theAssets,Processing activities,Entities, andVendorsscreens. This enhancement better reflects the increased functionality available via theRecycle binscreen.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.