Third-Party Risk Management - September 25, 2026 - 202609.2.0

General Availability

Table Enhancements for Third-Party Risk Management

Tables and table functionalities within the Assessments tab of the Engagement overview screen has been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs.

Note:

Select tables across Third-Party Risk Management may support these enhancements while others may not. These updates will continue to roll out incrementally so availability may vary. For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Fixed

  • Resolved an issue that prevented HackNotice news-feed items from displaying their full text in an empty source URL.

  • Resolved an issue that prevented the Search Contracts API from returning configured contract attribute values in the attributeValues object of the response.

  • Resolved an issue where the Delete vendor workflows permission displayed a dash (-) in the License column even though assigning it consumed a Third-Party Management/Admin User license. The licensing requirement is now clearly displayed.

  • Resolved an issue preventing users from saving or canceling edits to existing assessment routing rules in Third-Party Risk Management.

    addendum: This release note was added on October 2, 2026.

  • Resolved an issue where the Assessment tab on the Vendor details screen would display a blank page or Page Not Found error when accessed from global search.

    addendum: This release note was added on October 2, 2026.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Third-Party Management.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Third-Party Management.

Standard / Control Framework Changes

Connecticut Data Privacy Act (CTDPA) Framework Updated

Framework content has been updated to incorporate amendments to the Connecticut Data Privacy Act. Updates include expanded deletion rights for certain publicly available information and related inferences, restrictions on the sale of precise geolocation data, expanded purpose limitation requirements, and new requirements governing certain uses of facial recognition technology.

Things to Know

TheEngagementstab within theVendor detailspage has now been updated to the new table format.

TheDocumentstab within theInventory detailsof a third party now includes a document-source selector with two options:Supporting documentsandEngagement attachments.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.