Third-Party Risk Management - June 5, 2026 - 202606.1.0

Fixed

• Additional checks have been added to eliminate duplication of the Launch assessment workflow stage rule action.

Existing Public Preview Features

Third-Party Risk Agent in Copilot

|Available with Solution Packaging Only

Leverage our Third-Party Risk Agent in Copilot to conduct deep research to automate and accelerate the onboarding of new vendors and launch inherent risk assessments. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see OneTrust Third-Party Risk Agent Feature Guide.

Custom Notifications for Assessment Templates

Send customized, trigger-based automated email messages from a new global Notifications tab on the Assessment templates screen. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see Configuring Custom Email Notifications on Assessment Templates. This feature is related to the following ideas: OT-I-949, OT-I-1270, OT-I-3522, OT-I-7945, and OT-I-16348.

Configuring Approver-only Assessment Sections

Configure approver-only sections on assessments automatically using template rules or inventory-based values. These enhancements mean users can launch assessments with approver-only sections directly from the self-service portal.

For more information, see Configuring Approver-only Assessment Sections. This feature is related to the following ideas: AA-I-293 and AA-I-302.

Leveraging AI Auto-responses for Assessments

Opt-out of automatically scanning your three most recent assessments, plus add more files, more file types, and bigger files to your uploads. These enhancements improve the performance and accuracy of the AI Doc Scanner.

For more information, see Leveraging AI Auto-responses for Assessments.

Table Enhancements for Third-Party Risk Management

Tables and table functionalities within the Assessments tab of the Engagement overview screen has been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs.

Note:

Select tables across Third-Party Risk Management may support these enhancements while others may not. These updates will continue to roll out incrementally so availability may vary. For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Standard / Control Framework Changes

Virginia Consumer Data Protection Act (VCDPA) Framework Updated

Framework content updated to align with the latest amendment to the Virginia Consumer Data Protection Act (VCDPA), signed into law on April 13, 2026, which introduces new restrictions on the sale of precise geolocation data. The updated Virginia Consumer Data Protection Act (VCDPA) framework is now available on Compliance Automation, ITRM, and TPRM products.

For more information, see Supported Control Frameworks.

Utah Consumer Privacy Act (UCPA) Framework Updated

Framework content updated to align with the latest amendment to the Utah Consumer Privacy Act (UCPA), enacted through HB 418 (2025), which introduces a new consumer right to request correction of inaccurate personal data. The updated Utah Consumer Privacy Act (UCPA) framework will be available on Compliance Automation, ITRM, and TPRM products on June 4, 2026.

For more information, see Supported Control Frameworks.

Things to Know

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.