--- sourceDocument: australia Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/australia/delta-zurich-australia Release : - australia ft:locale : - en-US ft:publication_title : - australia Combined Product Files ft:clusterId : - delta3az bundleId : - delta3az --- # Combined Privacy Management release notes for upgrades from Zurich to Australia # Combined Privacy Management release notes for upgrades from Zurich to Australia {#ariaid-title1} Release version: Australia Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 12 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Privacy Management Release Notes for Upgrades from Zurich to Australia This consolidated document outlines the key updates, new features, changes, and important upgrade information for ServiceNow Privacy Management customers transitioning from the Zurich to Australia release family. It provides practical guidance to prepare for the upgrade, detailing enhancements that improve privacy risk assessment, compliance management, case handling, and user access controls, alongside the introduction of generative AI capabilities branded as ServiceNow Otto for Privacy Management. Show full answer Show less ## New Features * **Data Subjects Management:** Define multiple data subject types per processing activity, capturing data volumes, specific data elements, and user locations for granular privacy processing visibility. * **Privacy Management Dashboard:** A unified dashboard offers an at-a-glance view of privacy risk, compliance scores, trends, and global legal frameworks to prioritize remediation efficiently. * **Standardized Screening and Privacy Impact Assessment (PIA) Templates:** New templates ensure consistent, automated privacy risk assessments aligned with regulatory requirements. * **External Personal Data Rights (PDR) Form:** Customers, ex-employees, and third parties can submit PDR requests directly from websites without needing Employee Center access, secured via email verification and customizable for organizational needs. * **Access Control by Legal Entity:** Restricts team access to processing activities relevant only to their legal entity, upholding privacy by design and reducing operational risks. * **ServiceNow Otto for Privacy Management:** Generative AI assists privacy workflows by summarizing risk assessments, condensing issue details, and merging control objectives, accessible through a dedicated plugin with role-based permissions. * **Email Reporting of Privacy Cases:** Employees can report privacy incidents via email, simplifying case creation and tracking without complex portals. * **Impacted and Related Areas Configuration:** Privacy case managers can add customized business area types to cases, enhancing contextual accuracy. * **Enhanced PDR External Form Configuration:** Privacy administrators can tailor forms by jurisdiction, data subject type, and request type, including terms, disclaimers, and dynamic field visibility to streamline data collection. * **Stakeholder Editing of Processing Activities:** Enables users without privacy roles to be designated as key stakeholders with view-only access and request edit permissions, improving collaboration. * **Updated Privacy Content Library:** Includes new regulatory authority documents (e.g., Digital Personal Data Protection Act 2023, Virginia and Colorado privacy acts) with AI-mapped control objectives and updated risk statements. * **Smart Versioning of Privacy Assessment Templates:** Allows revision of templates without disrupting ongoing assessments, ensuring consistency and flexibility. * **Case Summarization with Now Assist:** AI-generated structured summaries of privacy cases help analysts quickly understand case details and maintain updated records. * **Anonymous Privacy Case Reporting:** Secure portal enables employees to report violations anonymously with encrypted follow-up communication, supporting regulatory compliance and trust-building. * **Hierarchy and Lineage Enhancements:** Clarifies relationships between systems, vendors, and applications scoped to specific processing activities, improving data flow context. * **Privacy Content Accelerator:** Provides pre-built regulatory content aligned with major privacy frameworks for easy access and deployment within Privacy Workspace. ## Changes * **Generative AI Skills Default Activation:** Newly installed AI products activate designated generative AI skills by default; existing customers upgrading may see certain unconfigured skills enabled automatically. * **Processing Activity Overview Redesign:** A unified dashboard now shows key compliance, risk, and criticality metrics to facilitate activity assessment and prioritization. * **Coral Theme Introduction:** The Coral theme is now the default for portals and mobile, offering a refreshed, brand-neutral interface with a dark mode option to improve readability and reduce eye strain. * **Privacy Management Home Page Update:** Home page now features dedicated tabs for Processing Activity, Risk and Compliance, Operations, and Privacy Cases to enhance report organization and accessibility. * **ServiceNow Otto Rebranding:** The Now Assist AI experience is renamed ServiceNow Otto, providing agentic AI capabilities with multimodal interactions and autonomous orchestration across workflows. * **AI Platform Model Selection:** Third-party large language models are the new default for AI assets; the ServiceNow Now LLM Service remains available for manual selection. * **New AI Licensing Tiers:** Foundation, Advanced, and Prime tiers offer graduated AI capabilities, from basic insights to autonomous actions and custom AI agents, aligned to customer licenses. ## Activation and Requirements Privacy Management continues to be available via the ServiceNow Store. Customers should request installation through the store to access the latest release features. There are no additional or changed browser, localization, or accessibility requirements beyond those noted, except for the new dark theme option introduced with the Coral theme. ## Removed and Deprecated Features There are no removals or deprecations in Privacy Management features between Zurich and Australia releases. ## Practical Benefits for ServiceNow Customers Consolidated page of all release notes for Privacy Management from Zurich to Australia. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Privacy Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Australia. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Privacy Management to Australia Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-privacymanagement-summary__entry__2} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## New features Between your current release family and Australia, new features were introduced for Privacy Management. {#dfrn3-privacymanagement-summary__entry__8} | Release | Release notes | |-|-| | Zurich | [Data subjects](https://www.servicenow.com/docs/access?context=data-subjects&family=zurich&ft:locale=en-US) : Select and define the multiple data subject types for each processing activity. You can capture the volume of data subjects that were processed, the specific data elements that were collected from the users, and the user locations. With this feature, you get a realistic, granular, and scalable representation of your processing activities. [Privacy management dashboard](https://www.servicenow.com/docs/access?context=privacy-manager-dashboard&family=zurich&ft:locale=en-US) : Get an overview of your complete privacy risk and compliance posture from the Privacy Management dashboard so that you can quickly prioritize and remediate your processing activities. By looking at the Processing Activities, Risk \& Compliance, and Operations \& Case management sections, you can see the overall compliance score, trends, privacy criticality assessment scores, and risk heatmap. From the dashboard, you can also see information about the global legal framework to understand the regional obligations and the built-in risk metrics that automatically assess each processing activity. [New screening and PIA templates](https://www.servicenow.com/docs/access?context=privacy-mgmt-workflow&family=zurich&ft:locale=en-US) : Use the new Privacy Impact Assessments (PIAs) and Screening Assessment templates that provide standardized questions, evaluation criteria, and workflows so that you can perform a processing activity criticality and privacy risk assessment. With these new templates, you can ensure consistency, reduce manual effort, and support compliance with regulatory and organizational requirements. [PDR external-facing form](https://www.servicenow.com/docs/access?context=pdr-external-facing&family=zurich&ft:locale=en-US) : A new external-facing form for personal data rights (PDR) requests is now available, enabling customers, ex-employees, and third party individuals to initiate PDR requests directly from a company's website, without needing Employee Center access. The form allows users to submit various requests, including Right to Know, Right to Delete, Right to Correct, and Right to Opt-Out, with the flexibility to add additional request types as required. An email-based verification process ensures security before processing the PDR request. The PDR form is customizable and can be easily embedded on external sites. [Access control by legal entity](https://www.servicenow.com/docs/access?context=access-control-by-legal-entity&family=zurich&ft:locale=en-US) : The Access control by legal entity feature allows teams to access processing activities relevant only to their legal entity. This ensures teams view only their own records, maintaining adherence to the privacy by design principle. By limiting access according to legal entities, this feature reduces operational risks and enables organizations to manage privacy requests and regulatory compliance effectively. [ServiceNow Otto for Privacy Management](https://www.servicenow.com/docs/access?context=now-assist-for-privacy-management&family=zurich&ft:locale=en-US) : Now Assist for Privacy Management leverages GenAI to support privacy workflows by summarizing risk assessments, condensing issue details, and identifying redundant control objectives and merging them into a common control objective. Now Assist for Privacy Management is delivered as a separate plugin, requiring administrators to activate specific skills and assign the new sn_prm_gen_ai.user role to access these features. [Report a privacy case through email](https://www.servicenow.com/docs/access?context=add-issues-email&family=zurich&ft:locale=en-US) : Employees can now report privacy incidents directly through email, eliminating the need for complex forms or portals. This enhancement simplifies the reporting process, enabling faster case handling and efficient tracking of privacy issues. [Impacted and related areas configuration](https://www.servicenow.com/docs/access?context=configure-record-type-area&family=zurich&ft:locale=en-US) : The Record Type Configuration feature allows privacy case managers or analysts to add additional relevant business area types in impacted and related areas. When creating or updating a privacy case, users can select from pre-defined options to add these areas, ensuring that each case accurately reflects its business context. | | Australia | [External-facing PDR form configuration](https://www.servicenow.com/docs/access?context=configure-pdr-ext-form&family=australia&ft:locale=en-US) : * Starting from version 22.3.x of Personal Data Rights (PDR), privacy administrators can navigate to External form configuration to tailor the public-facing PDR form for their organization. They can map jurisdictions to data subject types and request types, and specify whether an authorized agent can submit a request on behalf of a data subject for each jurisdiction. * For each jurisdiction, administrators can add terms and conditions, disclaimers, and guidance text that requesters see when they submit a request from that jurisdiction. * Administrators can also show or hide form fields based on the combination of jurisdiction, data subject type, and request type that a requester selects. The form collects only the information needed, therefore, requesters see only the fields that apply to their request. [Enable key stakeholders to edit processing activities](https://www.servicenow.com/docs/access?context=request-edit-access-pa&family=australia&ft:locale=en-US) : * Starting from version 22.3.x of Privacy Management, privacy analysts can add any user, including users without privacy roles, as a key stakeholder on a processing activity. Such users are set to No privilege to respond to assessments by default and therefore, can only view the record if they are granted the business user role. * Key stakeholders with the appropriate business user role can access and view the related lists of a processing activity directly from the Employee Center. * After they review the processing activity and find that it needs updating, they can select Request edit access to ask for editing rights to a processing activity. [New privacy content in Privacy Management Content](https://www.servicenow.com/docs/access?context=update-privacy-content&family=australia&ft:locale=en-US) : * Starting from version 22.3.x of Privacy Management Content, privacy managers can extend their regulatory library with new ready-to-use authority documents, Digital Personal Data Protection Act 2023 (DPDPA), Virginia Consumer Data Protection Act, and Colorado Privacy Act. When activating an authority document, they can select which citations to add to the library, and then select from the AI-generated control objectives already mapped to those citations. * Privacy Management Content also ships an updated version of privacy risk statement that carries forward the AI-generated risk statements from the previous version and adds new ones. Reinstalling the already existing risk statements after the update may overwrite certain changes made to them. [Smart assessment versioning of privacy assessment templates](https://www.servicenow.com/docs/access?context=create-new-smart-asmt-version&family=australia&ft:locale=en-US) : Starting from version 22.3.x of Privacy Management and Privacy Case Management, you can create a version of an existing privacy assessment template to revise the questionnaire, response options, or automations without disrupting assessments that are already in progress. New privacy assessments use the latest published version of the template. [Case summarization for privacy cases](https://www.servicenow.com/docs/access?context=privacy-case-summarization-skill&family=australia&ft:locale=en-US) : Privacy analysts can now use the Now Assist case summarization feature to quickly understand a privacy case without manually reviewing every field or related list. Now Assist analyzes key case attributes, such as timelines, impacted areas, evidence, and actions, and generates a structured summary directly inside the privacy case. This feature solves a common problem: case data is often lengthy, scattered across multiple related lists, and difficult for analysts to digest efficiently. Analysts can also save and edit summaries as case data evolves, ensuring the record stays current. [Report a privacy case anonymously](https://www.servicenow.com/docs/access?context=report-privacy-case-anonymously&family=australia&ft:locale=en-US) : Employees can now use the Anonymous Reporting Center to report privacy violations such as data breaches or exposure, unauthorized data use, privacy law violations (GDPR, CCPA), or other privacy-by-design lapses without revealing their identity or location.Accessed through the Employee Center, the Anonymous Reporting Center portal automatically logs users out to enforce anonymity, creates case records without mapping to employee identity, and provides a unique report key for secure follow-up communication.Reports are routed to the appropriate compliance team based on the nature of the concern. Throughout the investigation process: * Investigators can request additional information through a comments system visible to the reporter * Reporters can follow up on their case using their report key to check progress and respond to questions * All interactions maintain reporter anonymity at every step; no identity or location data is ever captured or linked This enhancement enables organizations to build trust, mitigate risks before escalation, and ensures regulatory compliance with whistleblower protection requirements. [Hierarchy and lineage enhancements](https://www.servicenow.com/docs/access?context=hierarchy-tab&family=australia&ft:locale=en-US) : The Hierarchy and lineage enhancements enables privacy teams to identify which systems, vendors, and applications belong to a specific processing activity by marking relationships as "part of a processing activity." This ability differentiates scoped components from global or shared connections. Users can toggle between a processing‑activity‑scoped view and a full lineage view, helping them understand data flows in the appropriate context. [Privacy content accelerator](https://www.servicenow.com/docs/access?context=privacy-content-accelerator&family=australia&ft:locale=en-US) : The privacy regulatory content through Unified Content Management provides pre‑built authority documents, citations, control objectives, and risk statements aligned with major privacy frameworks, including GDPR, CCPA, LGPD, and the NIST Privacy Framework 1.0. These resources are available for download directly from the Privacy Workspace, enabling teams to readily access standardized regulatory content. | [ ] ## Changes Between your current release family and Australia, some changes were made to existing Privacy Management features. {#dfrn3-privacymanagement-summary__entry__14} | Release | Release notes | |-|-| | Zurich | [Some generative AI skills are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=zurich&ft:locale=en-US) : The new default behavior works as follows: * New customers: When you install an AI product, designated skills are turned on automatically. * Existing customers who are upgrading (starting with Australia Early Access): Any previously unconfigured skill is turned on automatically (the skill was never configured and turned on, then turned off again). Previously configured skills that were turned on, then off, remain inactive. [Processing activity tab](https://www.servicenow.com/docs/access?context=processing-activity-tab&family=zurich&ft:locale=en-US) : The revamped Processing Activity overview page provides a unified dashboard that displays key compliance and risk metrics, such as risk scores, compliance scores, and criticality scores. This update makes it easier for privacy managers and analysts to assess the status of each processing activity, track open issues, and prioritize actions. Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. [Layout for processing activity record view](https://www.servicenow.com/docs/access?context=processing-activity-homepage&family=zurich&ft:locale=en-US) : The vertical layout of a processing activity enables you to see the information in a top-down linear flow. With this layout, you can see the sequential representation of a data processing workflow. [Privacy management home page](https://www.servicenow.com/docs/access?context=privacy-mgmt-ws-privacy-compliance-manager&family=zurich&ft:locale=en-US) : The enhanced Privacy Management home page now has dedicated tabs for Processing Activity, Risk and compliance, Operations, and Privacy Cases. This updated layout helps to improve readability by organizing your reports into clearly defined sections. | | Australia | [ServiceNow Otto® name announcement](https://www.servicenow.com/docs/access?context=sn-ai-implementation-landing&family=australia&ft:locale=en-US) : ServiceNow Otto introduced AI on the platform. As that experience has evolved, there's a new name for the experience. ServiceNow Otto® is the conversational AI platform integrated into ServiceNow workflows. It provides agentic capabilities, supports multimodal interactions across web, mobile, and messaging channels, and enables autonomous orchestration for cross-system workflows.The Now Assist for Privacy Management (sn_prm_gen_ai) plugin has been renamed to ServiceNow Otto for Privacy Management. [Large language models on the ServiceNow AI Platform](https://www.servicenow.com/docs/access?context=exploring-large-language-models&family=australia&ft:locale=en-US) : The Now LLM Service is no longer the default model provider for new or inactive AI assets. A third-party LLM is now selected by default, while existing configurations using the Now LLM Service continue unchanged. The Now LLM Service is still available for manual selection. [ServiceNow product tiers](https://www.servicenow.com/docs/access?context=ai-native-sku-overview&family=australia&ft:locale=en-US) : The ServiceNow AI Platform now brings you a new AI experience with three licensing tiers available: * Foundation: AI basics to deliver insights * Advanced: AI to boost productivity across relevant use cases * Prime: Act autonomously with all AI assets, and create your own Depending on your license, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents. | [ ] ## Removed Between your current release family and Australia, some Privacy Management features or functionality were removed. {#dfrn3-privacymanagement-summary__entry__20} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Deprecations Between your current release family and Australia, some Privacy Management features or functionality were deprecated. {#dfrn3-privacymanagement-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Activation information Review information on how to activate Privacy Management. {#dfrn3-privacymanagement-summary__entry__32} | Release | Release notes | |-|-| | Zurich | Activation information : Install Privacy Management by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: Privacy Management is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | Activation information : Install Privacy Management by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=australia&ft:locale=en-US). Important: Privacy Management is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Privacy Management we have noted them here. {#dfrn3-privacymanagement-summary__entry__38} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Privacy Management we have noted them here. {#dfrn3-privacymanagement-summary__entry__44} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Privacy Management, such as specific requirements or compliance levels. {#dfrn3-privacymanagement-summary__entry__50} | Release | Release notes | |-|-| | Zurich | Accessibility information : Dark theme : The new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability. | | Australia | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Privacy Management we have noted them here. {#dfrn3-privacymanagement-summary__entry__56} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Privacy Management we have noted them here. {#dfrn3-privacymanagement-summary__entry__62} | Release | Release notes | |-|-| | Zurich | * A new external Personal data rights (PDR) request form enables customers, ex-employees, and third parties to submit PDR requests from a website with email verification. * Access Control by Legal Entity feature enables teams to access only processing activities relevant to their legal entity, maintaining privacy by design principle. * Now Assist for Privacy Management plugin uses Generative AI to streamline privacy workflows by summarizing assessments, condensing issues, and merging control objectives. * Reporting privacy incidents through email feature enables employees to report privacy incidents directly through email. * Impacted and related areas configuration allows privacy case managers to add custom business area types to privacy cases for better context. * Revamped Processing Activity overview page provides a unified dashboard showing key compliance and risk metrics for processing activities. See [Privacy Management](https://www.servicenow.com/docs/access?context=privacy-management&family=zurich&ft:locale=en-US) for more information. | | Australia | * ServiceNow Otto is the new name for the Now Assist experience, delivering agentic AI, multimodal interactions, and autonomous cross-system workflow orchestration. * Configure the Personal Data Rights (PDR) external-facing form to map jurisdictions to data subject types and request types, and control whether an authorized agent can submit a request on behalf of a data subject. * Enable key stakeholders to view and update processing activities that they own directly from GRC tasks in the Employee Center. * Activate new ready-to-use privacy content, including risk statements and authority documents, such as Digital Personal Data Protection Act 2023 (DPDPA), the Virginia Consumer Data Protection Act, and the Colorado Privacy Act. * Automatically generate an AI-recommended privacy case summary from varied compliance case data, reducing investigation time and enabling faster, more consistent decision-making. * Anonymously report compliance violations through a secure portal that maintains complete identity protection while enabling organizational trust and regulatory compliance. See [Privacy Management](https://www.servicenow.com/docs/access?context=privacy-management&family=australia&ft:locale=en-US) for more information. | [ ]