Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configuring Privacy Management

Follow the order of the tasks given here to configure Privacy Management. These tasks will help you manage your privacy program effectively.

  • Download Privacy Management
    Before you run GRC: Privacy Management (sn_privacy) in your instance, you must download it from the ServiceNow Store.
  • Manage the Privacy Management library
    The Privacy Management library consists of authority documents, citations, control objectives, policies, and [PI] Information objects that help to manage the privacy content.
  • Configure smart assessment templates for screening assessments
    Create a privacy assessment template using the Smart Assessment Engine as a base for sending screening assessments and use it to detect the privacy risks and mitigate those risks.
  • Configure smart assessment templates for impact assessments
    Create privacy assessment templates using the Smart Assessment Engine as a base for sending privacy impact assessments and using them to detect the privacy risks and mitigate those risks.
  • Create a privacy assessment
    Create various types of assessments and send those assessments to the business process or business application owners to collect their responses. The responses help you to understand how personal information (PI) is being used or stored in a processing activity.
  • Create and validate an assessment configuration
    Create your assessment configurations to determine when a processing activity must be automatically created.
  • Update a privacy assessment template
    Publish a new version of a smart assessment template to revise its questionnaire, response options, or automations. Each version maintains a change history of templates used in privacy screening, impact, and breach assessments.
  • Map a table with a processing activity
    Keep your processing activity updated and in sync with any table in ServiceNow® by mapping the entity fields with the processing activity.

Parent Topic:Privacy Management