States of a privacy breach assessment

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read
  • After a privacy analyst initiates a privacy breach assessment, the assigned reviewer contributes their insights and includes the personally identifiable information (PI) artifacts and relevant jurisdictions before it is completed and closed.

    The states of a breach assessment are listed as follows:
    1. Draft: This is the default state when a breach assessment is initiated.
    2. Assigned: This is the state when the privacy analyst assigns the assessment to a user.
    3. Work in progress: This is the state when the reviewer accepts the assignment and adds PI artifacts and jurisdictions to the breach. The reviewer then sends the assessment for a review to the privacy analyst.
    4. Review: In this state, the privacy analyst reviews the assessment.
    5. Closed: After the reviewer completes the review, the reviewer completes and closes the assessment.