Third-Party Risk Management - June 26, 2026 - 202606.2.0

Fixed

  • Resolved an issue that prevented users from saving added or reordered columns on the Engagement overview screen.

  • Resolved an issue that impacted users creating assessments via API integrations when using the inventoryTypeName parameter.

Existing Public Preview Features

Third-Party Risk Agent in Copilot

|Available with Solution Packaging Only

Leverage our Third-Party Risk Agent in Copilot to conduct deep research to automate and accelerate the onboarding of new vendors and launch inherent risk assessments. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see OneTrust Third-Party Risk Agent Feature Guide.

Custom Notifications for Assessment Templates

Send customized, trigger-based automated email messages from a new global Notifications tab on the Assessment templates screen. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see Configuring Custom Email Notifications on Assessment Templates. This feature is related to the following ideas: OT-I-949, OT-I-1270, OT-I-3522, OT-I-7945, and OT-I-16348.

Configuring Approver-only Assessment Sections

Configure approver-only sections on assessments automatically using template rules or inventory-based values. These enhancements mean users can launch assessments with approver-only sections directly from the self-service portal.

For more information, see Configuring Approver-only Assessment Sections. This feature is related to the following ideas: AA-I-293 and AA-I-302.

Leveraging AI Auto-responses for Assessments

Opt-out of automatically scanning your three most recent assessments, plus add more files, more file types, and bigger files to your uploads. These enhancements improve the performance and accuracy of the AI Doc Scanner.

For more information, see Leveraging AI Auto-responses for Assessments.

Table Enhancements for Third-Party Risk Management

Tables and table functionalities within the Assessments tab of the Engagement overview screen has been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs.

Note:

Select tables across Third-Party Risk Management may support these enhancements while others may not. These updates will continue to roll out incrementally so availability may vary. For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Standard / Control Framework Changes

New Oklahoma Consumer Data Privacy Act Framework Added

The Oklahoma Consumer Data Privacy Act (OKCDPA), effective January 1, 2027, establishes a comprehensive data privacy framework and mandates transparency and consumer rights regarding personal data collected by for-profit entities conducting business in Oklahoma.

We’ve made implementing the OKCDPA easy by offering the framework on our platform and ensuring users can benefit from its overlap with other frameworks that exist on our platform. The platform contains survey questions to help you define scope that will bring all relevant controls, control implementation guidance, and evidence tasks (including guidance) to help you in meeting the requirements of the OKCDPA.

For more information, see Supported Control Frameworks.

New NIS2 Germany Framework Added

Germany’s NIS2 Implementation Act, effective December 6, 2025, transposes the EU NIS2 Directive into German law and strengthens cybersecurity requirements for essential, important, and critical entities operating in Germany. The framework introduces obligations relating to cybersecurity risk management, incident reporting, governance oversight, registration with the Federal Office for Information Security (BSI), and supply chain security.

We’ve made implementing NIS2 Germany easier by offering the framework on our platform and ensuring users can benefit from its overlap with other cybersecurity and information security frameworks that exist on our platform. The platform contains survey questions to help define scope and bring in all relevant controls, control implementation guidance, and evidence tasks, including guidance, to support compliance with Germany’s NIS2 requirements.

Note:

The NIS2 Germany Framework will be available on the OneTrust platform on July 3rd, 2026.

For more information, see Supported Control Frameworks.

Things to Know

Hint popovers are now available when configuringEngagementsingle select and multi select attributes to assist with option value selection.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.