Release Details
Platform Application: Governance Suite
Release: 2024.11.02
Release Date: Nov 27, 2024
Summary
The following new enhancements and functionality will be deployed on November 27, 2024:
PrivacyCentral
- Add Audit Log on Intelligence Scan Page
- Display Effectiveness Impact for Tasks
- Add Attestation Weightings Action Options
- Add Link Expiration for External Users
- Update Custom Controls
Nymity Research
- Include Reference in Compliance Alerts
- Update Banner Ad in Public References
-
Privacy Knowledge Content Release
Data Mapping & Risk Manager
Assessment Manager
- Ability to write a message to include in reminders is only enabled when Email reminder frequency is set
- Survey answers are carried over to the cloned assessment
PrivacyCentral
Add Audit Log on Intelligence Scan Page
Benefits
Easily download the audit log from the Intelligence Scan page.
Details
-
Changed the Download Report button to the Download drop-down menu and added Audit Log as option which downloads the audit log in CSV format
-
Included the following information in the audit log:
- Entity Action
- External Standard Ids
- User Id
- User Name
- Email - included when there is select/unselect operation
- Created
- Message
Display Effectiveness Impact for Tasks
Benefits
Clearly display which tasks, when completed, will have the greatest impact on the effectiveness score and, consequently, the compliance program.
Details
-
Added an Effectiveness Impact column on the Tasks list on the Review page and Tasks page
-
Review page
-
Tasks page
-
Review page
Add Attestation Weightings Action Options
Benefits
Give options to Attestation users on viewing weightings on downloads and reports.
Details
-
Added an Export Weightings button on Attestation Settings that downloads the PMC/PMA Weightings for a given attestation in an XLS file .
-
Here’s an example of the content of the downloaded report:
-
Here’s an example of the content of the downloaded report:
-
Added the Ignore Weighting checkbox in the Attestor Over Time Reports that when checked does not include weightings in the report.
Add Link Expiration for External Users
Benefits
Improve security by revoking user access to PrivacyCentral content after a period of time.
Details
- The link sent to external users expires within a week/15 days from being sent, or right after the response/task is submitted, whichever comes first.
Update Custom Controls
Benefits
Easily manage custom controls.
Details
- Added an option to create and edit custom controls on a control group level
Nymity Research
Include Reference in Compliance Alerts
Benefits
Improves user experience.
Details
Include reference in Compliance Alerts sent to users.
Update Banner Ad in Public References
Benefits
Boost engagement, and increase free trial sign-ups.
Details
Replaced the out-of-date banner ad displayed in public References, which when clicked redirects users to Nymity Research Free Trial page (https://trustarc.com/free-trial/nymity-research/?utm_source=product&utm_medium=ad&utm_campaign=twip-benefits-ad).
Privacy Knowledge Content Release
NOTE: Privacy Knowledge content is released on a monthly schedule.
Operational Templates
Benefits
Continuing the release of our new US Consumer Privacy templates, which integrate and synthesize the myriad of US State Consumer Privacy Laws into a comprehensive, unified framework. By highlighting both commonalities and state-specific nuances, these templates offer a clear, consolidated view that simplifies compliance.
Details
-
PMC 4. Embed Data Privacy Into Operations:
- US Consumer Privacy - Geolocation Data and Privacy Laws
- US Consumer Privacy - Requirements for Online Advertising
- US Consumer Privacy - Children’s Personal Information and Privacy Laws
- US Consumer Privacy - Sample Children's Privacy Policy
- US Children’s Privacy Matrix
Other Platform Content Updates
Benefits
As always, we are committed to delivering the most current and relevant information on legislative requirements and regulatory guidance. The following standards and laws have been added to PrivacyCentral and Nymity Research.
Details
Topics
-
New jurisdiction added:
- Yukon Access to Information and Protection of Privacy Act
Law Tables/Privacy and Cybersecurity Law Monitor
-
New legislation added:
- Illinois Insurance Data Security Act
- Maryland Insurance Data Security Act
- Ethiopia Data Protection Proclamation
- Somalia Data Protection Act
Breach Index
-
New laws added in the US:
- Illinois Insurance Data Security Act
- Maryland Insurance Data Security Act
- Louisiana Insurance Data Security Act
Data Mapping & Risk Manager
Updated existing column names and added new AI Risk columns to the Hub list pages
Benefits
Avoids confusion. Existing Risk columns are renamed to Data Processing Risk to avoid confusion. Since there are already three types of risks (Data Processing Risk, Data Transfer Risk, and AI Risk), it's hard for customers to understand which type of risk we are referring to when the column is labeled “Inherent Risk” since they all have an inherent risk score.
Easy access to AI Risk information. New AI Risk columns are added to the business process and data inventory list pages. Users do not need to open a Hub record to access the AI Risk information associated with that particular record such as its AI Inherent Risk and AI Residual Risk.
Details
In this release, on the business process and data inventory list pages/tabs, the existing column names, column configs, filters, .csv export tool, .csv export, and .PDF report are updated with the new names:
- Inherent Risk → Data Processing Inherent Risk
- Residual Risk → Data Processing Residual Risk
- Inherent Risk Justification → Data Processing Risk Justification
- Risk Assessment → Data Processing Assessment
- Risk Assessment Tasks → Data Processing Assessment Tasks
- Selected Assessment Template → Data Processing Assessment Template
Also, the following new columns are added to the business process and data inventory list pages and column config drop-downs:
- Artificial Intelligence Usage → AI Usage (This column exists, just update name)
- AI Inherent Risk
- AI Residual Risk
- AI Inherent Risk Notes
- AI Risk Assessment
- AI Risk Tasks
- AI Risk Template
Assessment Manager
Ability to write a message to include in reminders is only enabled when Email reminder frequency is set
Benefits
Improves user experience. The message box in the Set Schedule and Notifications modal is hidden when the email reminder frequency is not set. This is to make sure that the message reminder is sent to recipients as scheduled.
Details
In this release, the message box (1) in the Set Schedule and Notifications modal is only shown when the email reminder frequency is set (2).
To access the modal, go to the Edit Assessment page, and then navigate to Advanced Settings > Configure.
Survey answers are carried over to the cloned assessment
Benefits
Improves user experience. Users, when answering the assessment survey, can see the responses from the cloned assessment.
Details
In this release, cloned assessments now include original responses. If the question from template X and template Y are associated with each other, then the answers are carried over to the cloned assessment despite changes to the structure.