---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Review a privacy assessment

# Review a privacy assessment {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information.

## Before you begin

Role required: sn_privacy.analyst

## About this task

As a reviewer, you can preview the assessment with the applicable risk statements, information objects, and control objectives.

After a business user submits a privacy assessment, it moves to the Review state. As the assigned analyst, you can perform the following actions on it:

* Review the relationships added to a hierarchy by the business user.
* Review the data transfer records generated from hierarchy relationships and remove those that aren't applicable.
* Request a revision of the assessment.
* Mark the assessment as complete.

## Procedure

1. Navigate to WorkspacesPrivacy Workspace.
2. Select the Tasks icon ![]().
3. In the My pending tasks tab, select Privacy assessments.
4. Open the assessment to be reviewed.
5. To review the hierarchy relationships defined by the business user, navigate to the Hierarchy tab.  
   This displays the relationships between the primary node and each of its related nodes.

   To see the locations and data elements scoped to each data subject type involved in a particular transfer, select
   Cell actions, then select View details in the Data subjects involved column.
6. To review the data transfers generated from the hierarchy relationships, navigate to the Data transfers tab.  
   This lists the data transfer records created for each movement of personal data. For more information, refer to [Manage data transfers](https://www.servicenow.com/docs/O6qxLjKbefYDv11GWBn99w "Organizations often transfer personal data between applications, vendors, business units, and regions, which are subject to privacy regulations. Privacy Management captures each movement as a data transfer record on the processing activity to help you comply with privacy regulations.").

   If one or more data transfers aren't relevant to the processing activity, select the record(s), and select Remove.
7. To view the records added through smart assessment automation rules, navigate to the Applicable scope tab.  
   For AI-assisted recommendations based on assessment responses, see [AI reviewer assist for privacy assessment tasks](https://www.servicenow.com/docs/YhKvBhTv4rFfG9OJZAcYgw "Privacy analysts reviewing an assessment can use AI-assisted recommendations to quickly identify control objectives and risk statements that are most likely to apply to a processing activity.").
8. To request more information from the responder, select Request for revision.
9. Mark the assessment as complete.
   1. Select Update state.
   2. In the State field, select Closed complete.
   3. **Optional:** In the Additional comments field, provide any additional information.
   4. Select Submit.

## Result

* The corresponding controls and risks for the records in Applicable scope are automatically scoped to the processing activity.
* The hierarchy relationships are mapped to the processing activity. You can manage these relationships or add new ones directly from the processing activity record by navigating to Processing data inventoryHierarchy. For steps, see [Add relationships to a hierarchy for a processing activity](https://www.servicenow.com/docs/cU8KAoNZ4OlmszYOF6Ao1Q "Define new relationships in a hierarchy directly on a processing activity to record how it connects to vendors, applications, systems, and other processing activities across regions. This enables you to track cross-border data transfers and generate a lineage map to visualize data consumption, sharing, and the associated risks for a processing activity.").
* The data transfers are mapped to the processing activity. You can manage data transfers directly from the processing activity record by navigating to Regulatory detailsData transfers. For details, see [Manage data transfers](https://www.servicenow.com/docs/O6qxLjKbefYDv11GWBn99w "Organizations often transfer personal data between applications, vendors, business units, and regions, which are subject to privacy regulations. Privacy Management captures each movement as a data transfer record on the processing activity to help you comply with privacy regulations.").

## What to do next

Data transfer records generated from hierarchy relationships require a transfer mechanism. To add one, see [Add a transfer mechanism to a data transfer record](https://www.servicenow.com/docs/sqxZmZh_zVrI6s9jOrD~Yw "Assign a transfer mechanism to a data transfer record to document the legal safeguard that permits the transfer of personal data.").

*[\>]: and then