Roles installed with Privacy Management
Summarize
Summarized using AI
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.
Summary of Roles Installed with Privacy Management
The GRC: Privacy Management application in ServiceNow Yokohama release installs specific roles designed to support privacy compliance tasks throughout an organization. Each role has distinct responsibilities and permissions tailored to ensure effective privacy management, assessment, and administration. Understanding these roles helps you assign appropriate access and streamline privacy workflows.
Show less
Key Roles and Their Responsibilities
- Privacy Analyst [snprivacy.analyst]: Manages privacy compliance for owned processing activities. Tasks include conducting privacy impact assessments, managing controls, resolving compliance concerns, and monitoring control effectiveness. This role contains multiple sub-roles related to risk and compliance tasks.
- Privacy Manager [snprivacy.manager]: Oversees organization-wide privacy compliance. Responsible for developing policies, reviewing regulatory requirements, designing controls, planning privacy programs, monitoring control effectiveness, supervising the privacy team, and reporting to management.
- Privacy Admin [snprivacy.admin]: Configures and administers privacy management solutions based on privacy team needs. Tasks include setting up impact assessments, automating processing activity creation, monitoring AI platform dependencies, and managing script configurations.
- Privacy Assessment Responder [snprivacy.assessmentresponder]: Responds to privacy assessments as a key stakeholder and can raise privacy requests via the portal.
- Privacy Business User [snprivacy.businessuser]: Can edit assigned processing activities in the Discover state and respond to assessments.
- Privacy Developer [snprivacy.developer]: Authorized to write custom scripts and inherits privacy admin permissions.
- Privacy Employee User [snprivacyemp.privacyemployee] (if Employee User app installed): Enables employees to request privacy impact assessments, report privacy cases, acknowledge policies, create policy exceptions, and raise privacy issues from the Employee Center.
- Lite Operator Roles (if GRC: Privacy Lite User app installed): Includes a subset of roles such as assessment responders and business users who can perform key privacy tasks like responding to assessments, handling breach assessments, managing personal data rights actions, and working on remediation tasks.
Practical Implications for ServiceNow Customers
Assigning these roles appropriately ensures that privacy compliance processes are efficiently managed at various organizational levels—from analysts handling specific data processing activities to managers overseeing the entire compliance posture. Admin roles enable configuration and automation, improving operational efficiency. Employee and lite user roles expand participation and task handling, supporting broad organizational engagement in privacy management.
By leveraging these predefined roles, you can maintain clear separation of duties, enhance compliance monitoring, and streamline privacy-related workflows within your ServiceNow environment.
The GRC: Privacy Management application installs the roles for the privacy analyst, the privacy manager, and the privacy administrator to perform their respective tasks.
| Role title [name] | Description | Contains roles |
|---|---|---|
| Privacy Analyst [sn_privacy.analyst] |
Privacy analysts are responsible for managing the privacy compliance posture
of the processing activities owned by them. They perform the following tasks:
|
|
| Privacy Manager [sn_privacy.manager] |
Privacy managers are responsible for managing the overall organization level
privacy compliance posture. They perform the following tasks:
|
|
| Privacy Admin [sn_privacy.admin] |
Privacy administrators administer the privacy policy and compliance
management. Users assigned this role are responsible for configuring privacy
management solutions as per the privacy team's requirements. They perform the
following tasks:
|
|
| Privacy assessment responder [sn_privacy.assessment_responder] |
Privacy assessment responders can respond to the privacy assessments as key stakeholders. They can also raise privacy requests from the portal. |
|
| Privacy business user [sn_privacy.business_user] |
Privacy business users can edit the assigned processing activities in the Discover state, and also respond to the assessments. |
|
| Privacy developer [sn_privacy.developer] |
Privacy developers can write custom scripts | sn_privacy.admin |
| If the Privacy Employee User application is installed, then the following roles are available. | ||
| Privacy employee user [sn_privacy_emp.privacy_employee] |
Enables your employees to perform the following operations from the Employee Center:
|
|
| If the GRC: Privacy Lite User application is installed, then the following roles are considered as lite operators. | ||
|
Users with the lite operator role can do the following:
|
|