Using Privacy Case Management

You can use the Privacy Case Management application to report privacy cases and manage the lifecycle of a privacy case.

• Reporting a privacy case
  Any user can report a privacy case or an event that needs the attention of the privacy team.
• Initiate a breach assessment from a case
  Initiate a breach assessment from a privacy case to capture the details of breach, the type of data that is impacted, and so on. These details help the privacy analyst to identify if the breach must be notified to a regulator.
• Work on a privacy breach assessment
  Accept the work of assessing a privacy breach assessment and work on the assessment.
• Case task workflow
  Case tasks help you to collaborate with multiple teams to investigate, perform impact assessment to establish case criticality, and gather evidence to capture the details and responses for further review.
• Add an impacted area to a privacy case
  Add the impacted areas or objects that are affected by the privacy case or event in the Privacy Case Management application.
• Add PI information objects to a privacy case
  To identify the types of personal data compromised during a breach, add [PI] information objects to a privacy case.
• Add key stakeholders to a privacy case
  Add key stakeholders to a privacy case to identify the key members who are responsible for the data that is lost during the breach. You can then send the respective breach assessments to the stakeholders based on their responsibilities.
• Add a related area to a privacy case
  Add the related areas that are related to a privacy case or event reported in the Privacy Case Management application.
• Add causes and consequences to a privacy case
  Define the root cause for the reported privacy case or event and its consequences on the organization using the Privacy Case Management application.
• Add a privacy regulation related to a case
  Add the necessary regulations that are or can be impacted by the case that has been reported. In the ServiceNow platform, regulations are captured as authority documents. Adding the regulations to the case enables you to identify which regulations are breached or violated and prevents penalties and fines.
• Add or create an issue for a privacy case
  Identify and manage issues related to the impacted areas for the reported privacy case. You can also create issues from the Privacy Case Management landing page.
• Export a privacy case as a PDF
  Export a privacy case as a PDF to easily share it with various stakeholders.
• Send an email from a privacy case
  Send emails from a privacy case to seamlessly communicate with various stakeholders and regulators and gather more information about the case. All the emails sent and received are stored in the Privacy Case Management application.
• Perform smart assessment on privacy action task
  Use the Tasks page on the Employee Center for a consolidated view of all your privacy tasks, including all assessments, enabling you to access and complete them efficiently.