Update content in the privacy library

Update an installed authority document or risk statement version to add newer citations, control objectives, and risk statements to your privacy library.

Disclaimer

Important:

The ServiceNow Risk products help customers address regulatory requirements under various jurisdictions. However, we do not guarantee compliance and customers are ultimately responsible for their own compliance with applicable regulations.

ServiceNow aims to provide software updates for new or updated major regulations and requirements within twelve to eighteen months of the regulation's publication. For regulations for which ServiceNow provides a level of support in the base system, ServiceNow aims to provide software updates for minor regulatory changes within 12 months and for major regulatory changes within up to 18 months depending on scope and impact. We differentiate between typical regulatory content updates, which do not require software updates or enhancements, and regulatory updates, which do require software updates or enhancements. Content updates are generally delivered on a shorter cadence than if software update or enhancement is required for the regulatory update or change.

Before you begin

Role required: sn_privacy.manager

Procedure

1. Navigate to Workspaces > Privacy Workspace.

2. Select the Privacy content icon

.

1. Depending on the scope for the content you want to update, select either the Privacy Frameworks tab or the Risk Statements tab.

2. Select Active.

3. In the authority document or risk statement entry, select Update.

4. In the Disclaimer message, select Agree.

   The installation wizard shows records associated with the selected authority document or risk statement version. Records not yet added to your library have the installation state Ready. Records already installed from this version have the installation state Installed.

   Note: Control objectives and risk statements are AI-generated. Although AI models are exposed to major privacy regulations, they aren't trained on the risk and compliance methodologies that your teams might use to derive a complete, consistent set of control objectives and risk statements from a regulation. Review each record for accuracy, scope, and fit with your internal taxonomy before you map it to processing activities or assessment questions.

5. Review the records available to install.

   • The Authority Document page lists the following document types:

     • Citations associated with the selected authority document. To view the source regulatory text related to the citations, add Supplemental guidance as a column using the Personalize fields option of the More Actions menu.

       Note: Citation descriptions are AI-generated. The source regulatory text in supplemental guidance is formatted using AI. Review all content for accuracy.

     • Control objectives mapped to the selected citations.

       • The Risk Statement page lists the privacy risk statements available with the selection version.
     • Select the records to install.

6. Select Next.

7. Review the number of selected records and select Submit.

   The status changes to Updating while installation is in progress.

8. Refresh the page to verify that installation is complete.

Result

The installed records are available in the List view of the Privacy Workspace.