Privacy content accelerator
Summarize
Summary of Privacy content accelerator
The Privacy content accelerator in ServiceNow Zurich release provides prebuilt privacy compliance content designed to help privacy users manage regulatory requirements efficiently. Accessible directly from the Privacy workspace, it includes authority documents, citations, control objectives, and risk statements aligned with major privacy frameworks such as GDPR, CCPA, LGPD, and the NIST Privacy Framework 1.0.
Show less
Important: While these tools assist in addressing regulatory requirements, ServiceNow does not guarantee compliance. Customers remain responsible for their own compliance and should note that software updates for major regulations are typically provided within 12 to 18 months of the regulation's publication.
Access and Roles
The privacy content accelerator is accessed via a dedicated icon in the Privacy workspace, visible only to users with Privacy Manager or Privacy Admin roles.
Content Structure and Management
- Tabs: The accelerator page has two tabs:
- Privacy Frameworks: Shows four authority documents with counts of related citations and control objectives, current status, and version information.
- Risk Statements: Displays categories of risk statements with version details and options to activate them.
- Authority Document Status:
- New: Document not installed; shows an Activate button.
- Active: Document installed; shows active version and Update button.
- Citations and Control Objectives:
- Each record has an installation state: "Ready" (not installed) or "Installed" (active in the instance).
- Activation or update of an authority document transitions associated citations and control objectives from Ready to Installed.
- If a citation with the same name already exists under the same authority document, installing updates will overwrite it.
- Parent citations and related control objectives are linked, with parent references populated after installation.
- Content Reference Records: Created upon activation of an authority document, storing the active version and linking to all installed citations and their control objectives.
Risk Statements
The Risk Statements tab organizes risk statement categories into cards displaying available content versions and allowing users to activate relevant risk statements.
The Privacy content accelerator provides prebuilt privacy compliance content that privacy users can activate directly from the Privacy workspace.
Disclaimer
The ServiceNow Risk products help customers address regulatory requirements under various jurisdictions. However, we do not guarantee compliance and customers are ultimately responsible for their own compliance with applicable regulations.
ServiceNow aims to provide software updates for new or updated major regulations and requirements within twelve to eighteen months of the regulation's publication. For regulations for which ServiceNow provides a level of support in the base system, ServiceNow aims to provide software updates for minor regulatory changes within 12 months and for major regulatory changes within up to 18 months depending on scope and impact. We differentiate between typical regulatory content updates, which do not require software updates or enhancements, and regulatory updates, which do require software updates or enhancements. Content updates are generally delivered on a shorter cadence than if software update or enhancement is required for the regulatory update or change.
Accessing the privacy content accelerator
The Privacy content accelerator provides pre‑built authority documents, citations, control objectives, and risk statements aligned with major privacy frameworks, including GDPR, CCPA, LGPD, and the NIST Privacy Framework 1.0.
A dedicated icon in the Privacy workspace provides navigation to the privacy content accelerator. Only users with the Privacy Manager or Privacy admin roles can view and access this icon.
Content tab
- Privacy Frameworks: Displays four authority documents. Each authority document card shows the count of related citations and control objectives. The card also shows the current status and the version number (when an active version exists).
- Risk Statements: Displays risk statement categories. Each category card shows the version and provides an option to activate the associated risk statements.
Authority document status
- New: The authority document has not been installed. The card displays an Activate button.
- Active: The authority document is installed. The card displays the active version number and an Update button.
Installation states for citations and control objectives
Individual citation and control objective records display an installation state:
- Ready — The record has not yet been installed.
- Installed — The record is installed and active in the instance.
When an authority document is activated or updated, selected citations and control objectives transition from Ready to Installed.
Overwrite behavior for existing records
If a citation with the same name already exists in the instance and it belongs to the same authority document, installing the content pack version overwrites the existing record.
Parent citations
Citations may reference parent citations. If a parent citation has not been installed, the parent field on child citation records displays an empty value. The parent citation value is populated after the parent citation is installed. The same behavior applies to related control objectives.
Content reference records
When an authority document is activated, a content reference record is created. This record stores the active version and links to all citations installed for that authority document. Each citation record, in turn, lists its associated control objectives.
Risk statements
The Risk Statements tab in the privacy content accelerator displays risk statement categories. Each category is represented as a card that shows the version of the available content.