{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":18057,"path":"governance-risk-compliance/privacy-workspace/review-a-privacy-assessment.md","title":"Review a privacy assessment","bundle":null,"doc_type":null,"release":"australia","body":"\n# Review a privacy assessment\n\nReview a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information.\n\n## Before you begin\n\nRole required: sn\\_privacy.analyst\n\n## About this task\n\nAs a reviewer, you can preview the assessment with the applicable risk statements, information objects, and control objectives.\n\nAfter a business user submits a privacy assessment, it moves to the Review state. As the assigned analyst, you can perform the following actions on it:\n\n-   Review the relationships added to a hierarchy by the business user.\n-   Review the data transfer records generated from hierarchy relationships and remove those that aren't applicable.\n-   Request a revision of the assessment.\n-   Mark the assessment as complete.\n\n## Procedure\n\n1.  Navigate to **Workspaces** > **Privacy Workspace**.\n\n2.  Select the Tasks icon \\[Omitted image \"icon-tprm-ws-tasks.png\"\\] Alt text:.\n\n3.  In the My pending tasks tab, select **Privacy assessments**.\n\n4.  Open the assessment to be reviewed.\n\n5.  To review the hierarchy relationships defined by the business user, navigate to the **Hierarchy** tab.\n\n    This displays the relationships between the primary node and each of its related nodes.\n\n    To see the locations and data elements scoped to each data subject type involved in a particular transfer, select **Cell actions**, then select **View details** in the Data subjects involved column.\n\n6.  To review the data transfers generated from the hierarchy relationships, navigate to the **Data transfers** tab.\n\n    This lists the data transfer records created for each movement of personal data. For more information, refer to [Manage data transfers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/data-transfers.md).\n\n    If one or more data transfers aren't relevant to the processing activity, select the record\\(s\\), and select **Remove**.\n\n7.  To view the records added through smart assessment automation rules, navigate to the **Applicable scope** tab.\n\n    For AI-assisted recommendations based on assessment responses, see [AI reviewer assist for privacy assessment tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/ai-reccos-for-pia.md).\n\n8.  To request more information from the responder, select **Request for revision**.\n\n9.  Mark the assessment as complete.\n\n    1.  Select **Update state**.\n\n    2.  In the **State** field, select **Closed complete**.\n\n    3.  In the **Additional comments** field, provide any additional information.\n\n    4.  Select **Submit**.\n\n\n## Result\n\n-   The corresponding controls and risks for the records in Applicable scope are automatically scoped to the processing activity.\n-   The hierarchy relationships are mapped to the processing activity. You can manage these relationships or add new ones directly from the processing activity record by navigating to **Processing data inventory** > **Hierarchy**. For steps, see [Add relationships to a hierarchy for a processing activity](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/create-a-data-lineage-for-a-processing-activity.md).\n-   The data transfers are mapped to the processing activity. You can manage data transfers directly from the processing activity record by navigating to **Regulatory details** > **Data transfers**. For details, see [Manage data transfers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/data-transfers.md).\n\n## What to do next\n\nData transfer records generated from hierarchy relationships require a transfer mechanism. To add one, see [Add a transfer mechanism to a data transfer record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/add-transfer-mechanism-dt.md).\n\n**Parent Topic:**[Using Privacy Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/using-privacy-mgmt.md)\n\n"}}