Review a privacy assessment
Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information.
Before you begin
Role required: sn_privacy.analyst
About this task
As a reviewer, you can preview the assessment with the applicable risk statements, information objects, and control objectives.
After a business user submits a privacy assessment, it moves to the Review state. As the assigned analyst, you can perform the following actions on it:
- Review the relationships added to a hierarchy by the business user.
- Review the data transfer records generated from hierarchy relationships and remove those that aren't applicable.
- Request a revision of the assessment.
- Mark the assessment as complete.
Procedure
-
Navigate to Workspaces > Privacy Workspace.
-
Select the Tasks icon [Omitted image "icon-tprm-ws-tasks.png"] Alt text:.
-
In the My pending tasks tab, select Privacy assessments.
-
Open the assessment to be reviewed.
-
To review the hierarchy relationships defined by the business user, navigate to the Hierarchy tab.
This displays the relationships between the primary node and each of its related nodes.
To see the locations and data elements scoped to each data subject type involved in a particular transfer, select Cell actions, then select View details in the Data subjects involved column.
-
To review the data transfers generated from the hierarchy relationships, navigate to the Data transfers tab.
This lists the data transfer records created for each movement of personal data. For more information, refer to Manage data transfers.
If one or more data transfers aren't relevant to the processing activity, select the record(s), and select Remove.
-
To view the records added through smart assessment automation rules, navigate to the Applicable scope tab.
For AI-assisted recommendations based on assessment responses, see AI reviewer assist for privacy assessment tasks.
-
To request more information from the responder, select Request for revision.
-
Mark the assessment as complete.
-
Select Update state.
-
In the State field, select Closed complete.
-
In the Additional comments field, provide any additional information.
-
Select Submit.
-
Result
- The corresponding controls and risks for the records in Applicable scope are automatically scoped to the processing activity.
- The hierarchy relationships are mapped to the processing activity. You can manage these relationships or add new ones directly from the processing activity record by navigating to Processing data inventory > Hierarchy. For steps, see Add relationships to a hierarchy for a processing activity.
- The data transfers are mapped to the processing activity. You can manage data transfers directly from the processing activity record by navigating to Regulatory details > Data transfers. For details, see Manage data transfers.
What to do next
Data transfer records generated from hierarchy relationships require a transfer mechanism. To add one, see Add a transfer mechanism to a data transfer record.
Parent Topic:Using Privacy Management
---
title: Review a privacy assessment
description: Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/governance-risk-compliance/privacy-workspace/review-a-privacy-assessment.html
release: brazil
product: Privacy Workspace
classification: privacy-workspace
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 3
breadcrumb: [Use, Privacy Management, Governance, Risk, and Compliance]
---
# Review a privacy assessment
Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information.
## Before you begin
Role required: sn\_privacy.analyst
## About this task
As a reviewer, you can preview the assessment with the applicable risk statements, information objects, and control objectives.
After a business user submits a privacy assessment, it moves to the Review state. As the assigned analyst, you can perform the following actions on it:
- Review the relationships added to a hierarchy by the business user.
- Review the data transfer records generated from hierarchy relationships and remove those that aren't applicable.
- Request a revision of the assessment.
- Mark the assessment as complete.
## Procedure
1. Navigate to **Workspaces** > **Privacy Workspace**.
2. Select the Tasks icon \[Omitted image "icon-tprm-ws-tasks.png"\] Alt text:.
3. In the My pending tasks tab, select **Privacy assessments**.
4. Open the assessment to be reviewed.
5. To review the hierarchy relationships defined by the business user, navigate to the **Hierarchy** tab.
This displays the relationships between the primary node and each of its related nodes.
To see the locations and data elements scoped to each data subject type involved in a particular transfer, select **Cell actions**, then select **View details** in the Data subjects involved column.
6. To review the data transfers generated from the hierarchy relationships, navigate to the **Data transfers** tab.
This lists the data transfer records created for each movement of personal data. For more information, refer to [Manage data transfers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/data-transfers.md).
If one or more data transfers aren't relevant to the processing activity, select the record\(s\), and select **Remove**.
7. To view the records added through smart assessment automation rules, navigate to the **Applicable scope** tab.
For AI-assisted recommendations based on assessment responses, see [AI reviewer assist for privacy assessment tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/ai-reccos-for-pia.md).
8. To request more information from the responder, select **Request for revision**.
9. Mark the assessment as complete.
1. Select **Update state**.
2. In the **State** field, select **Closed complete**.
3. In the **Additional comments** field, provide any additional information.
4. Select **Submit**.
## Result
- The corresponding controls and risks for the records in Applicable scope are automatically scoped to the processing activity.
- The hierarchy relationships are mapped to the processing activity. You can manage these relationships or add new ones directly from the processing activity record by navigating to **Processing data inventory** > **Hierarchy**. For steps, see [Add relationships to a hierarchy for a processing activity](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/create-a-data-lineage-for-a-processing-activity.md).
- The data transfers are mapped to the processing activity. You can manage data transfers directly from the processing activity record by navigating to **Regulatory details** > **Data transfers**. For details, see [Manage data transfers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/data-transfers.md).
## What to do next
Data transfer records generated from hierarchy relationships require a transfer mechanism. To add one, see [Add a transfer mechanism to a data transfer record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/add-transfer-mechanism-dt.md).
**Parent Topic:**[Using Privacy Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/using-privacy-mgmt.md)
| title | Review a privacy assessment |
| description | Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/governance-risk-compliance/privacy-workspace/review-a-privacy-assessment.html |
| release | brazil |
| product | Privacy Workspace |
| classification | privacy-workspace |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 3 |
| breadcrumb | UsePrivacy ManagementGovernanceRiskand Compliance |