States of a privacy breach assessment

---
title: States of a privacy breach assessment
description: After a privacy analyst initiates a privacy breach assessment, the assigned reviewer contributes their insights and includes the personally identifiable information \(PI\) artifacts and relevant jurisdictions before it is completed and closed.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/privacy-workspace/life-cycle-of-a-privacy-breach-assessment.html
release: australia
product: Privacy Workspace
classification: privacy-workspace
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Privacy breach assessments, Explore, Privacy Case Management, Privacy Management, Governance, Risk, and Compliance]
---

# States of a privacy breach assessment

After a privacy analyst initiates a privacy breach assessment, the assigned reviewer contributes their insights and includes the personally identifiable information \(PI\) artifacts and relevant jurisdictions before it is completed and closed.

The states of a breach assessment are listed as follows:

1.  **Draft**: This is the default state when a breach assessment is initiated.
2.  **Assigned**: This is the state when the privacy analyst assigns the assessment to a user.
3.  **Work in progress**: This is the state when the reviewer accepts the assignment and adds PI artifacts and jurisdictions to the breach. The reviewer then sends the assessment for a review to the privacy analyst.
4.  **Review**: In this state, the privacy analyst reviews the assessment.
5.  **Closed**: After the reviewer completes the review, the reviewer completes and closes the assessment.