---
sourceDocument: Brazil Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Respond to a smart assessment

# Respond to privacy impact assessment {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Respond to an impact assessment from the Assessment Workspace to help privacy teams understand the potential privacy risks and their mitigation measures.

## Before you begin

Role required: sn_privacy.business_user

## About this task

A screening assessment is the first assessment that is sent to any responder to determine if the privacy teams need to be aware of any application that processes personal data. If there is personal data involved, then an impact assessment is sent to the key stakeholders. While the screening assessment only has the General section for questions, the impact assessment has two sections: Personal data and Questionnaire. Under the Personal data section, you find the following sections:

* Data elements: This section displays the information object categories and each information object that belongs to that category. Based on your selection during template configuration, you can view either all information object categories or only the selected ones.
* Data subjects types: In this section, you add the data subjects types whose personal data is involved in the processing activity.
* Hierarchy: In this section, you specify the source and the destination of data. By adding new relationships to a hierarchy, you define how data flows across related entities and their corresponding locations.
* Legal basis: In this section, you specify the lawful basis on which the data is processed. For example, information is processed for legal obligations. Specify the granular levels of the create, read, update, delete operations that can be performed on the data and also where the data is coming from and where it's being sent.

{#respond-to-a-privacy-smart-assessment__ul_hgc_fzl_zdc}Because the assessments use the Smart Assessment Engine, the responders can see the detailed description of each question and the guidance that helps the responder in answering the questions.

## Procedure

1. Navigate to AllSelf-ServiceEmployee Center.
2. On the Employee Center home page, select GRC tasks.
3. Navigate to TasksMy pending tasksPrivacy assessments.
4. Select the privacy impact assessment you want to take.  
   The assessment opens in the Assessment Workspace.
5. To take the assessment, select Start.
6. **Optional:** To reassign the assessment, select Reassign.  
   You can only reassign the assessment to a user who has the privilege to respond to an assessment and is a key stakeholder. For more information, see [Add key stakeholders to a processing activity](https://www.servicenow.com/docs/rABxvuX_XBtFgnog_izGXA "Add key stakeholders to a processing activity. Based on their role, users are assigned default processing activity privileges that control whether they can edit a processing activity, view it, or respond to its privacy assessments.").
7. On the Personal data section, provide the responses for the following sections.
   1. In the Data elements section, select all applicable data elements, then select Next.
   2. In the Data subject types section, add impacted data subject types.  
      Only the data subjects you add here are available for selection while creating a new hierarchy relationship. For steps, see [Add data subject type to privacy impact assessment](https://www.servicenow.com/docs/hU~oGZQIjWkcI4c0I_tqRA "Add data subject types to privacy impact assessment from the Employee Center.").
   3. In the Hierarchy section, create new relationships.  
      For detailed description of the relationship forms, see [Hierarchy relationship forms in Privacy Management](https://www.servicenow.com/docs/tEP9G67al5Vbbsi63s1ApQ "When you create a new hierarchy relationship in Privacy Management, you first define how a node is related to another, and then provide details for each related node.").
   4. In the Legal basis section, specify the lawful basis on which the data is processed.
   {#respond-to-a-privacy-smart-assessment__substeps_fgm_mjj_hkc}
8. Select Move to questionnaire, and fill in your responses.
9. Select Submit.
10. In the Submit dialog box, mark your confirmation, and select Submit.
11. **Optional:** To view your responses after submission, on the assessment page, select View.

## Result

After an assessment is submitted, the privacy team receives a notification about the assessment submission. The team can then choose to either act on it or reject it based on their analysis. To understand analyst actions on a
privacy assessment, see [Review a privacy assessment](https://www.servicenow.com/docs/oYnBDy_Yv187qfihSzDu6w "Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information.").

*[\>]: and then