This article describes how the privacy assessments offered within TerraTrue can be customized. The following set of actions is available to users in Workflow Library > Privacy Assessments.
Creating new assessments
Assessments can now be created from TerraTrue’s provided DPIA, LIA, PIA, and TIA templates in the Assessment Library (Workflow Library > Privacy Assessments). The Create Assessment button at the top of the library can be used to do so.
For the new assessment workflow, you should provide the following:
- A unique title is required for each assessment
- A type (DPIA, LIA, PIA or TIA) must also be selected. This decides the template to be used as the basis for the new workflow, and also how the assessment will be triggered within the privacy worksheet (see How does TerraTrue determine if a privacy assessment is necessary?).
- You can also decide whether this new assessment is eligible to be triggered in the privacy worksheet.
The newly created assessment will contain all of the pages and questions contained within the TerraTrue template. The assessment workflow can be edited before it is saved. Previous versions of the DPIA, LIA, and PIA templates are not available for use in creating new assessments, but older assessment workflows may be duplicated.
Duplicating existing assessment workflows
Any assessment workflow can be duplicated.
You can do this from the assessment workflow summary page. Select the assessment to be duplicated in the library, and use the Duplicate action found within the Edit Workflow button.
Duplicated workflows inherit the assessment type, as well as the set of pages and questions currently contained within the duplicated assessment. The opportunity to update the privacy worksheet triggering configuration of the assessment is also provided during duplication. As with the creation action, you may edit the assessment workflow before it is saved.
Publishing assessment workflows
Assessment workflows can be published and unpublished.
You can do this from the assessment workflow summary page. Select the assessment to be duplicated in the library, and use the Unpublish/Publish action found within the Edit Workflow button.
The unpublish action allows you to prevent the future use of an assessment within launches until you decide to publish the assessment again. Existing assessment responses are unaffected, but when adding assessments directly to a launch, or in a privacy worksheet the assessment will not be available for selection and will not be triggered.
Deleting assessment workflows
Assessment workflows can be deleted when they are unpublished, and when no responses currently exist for the assessment. Select the assessment to be deleted in the library, and use the Delete assessment action found within the Edit Workflow button.
Triggering assessments in the privacy worksheet
You can now decide which assessments can be triggered in the privacy worksheet. A single assessment of a given type may be configured to trigger in the privacy worksheet at any given time, i.e. only one DPIA workflow may trigger in the privacy worksheet. Updating an assessment such that it triggers will reset this feature for the other workflows of its type.
Please see How does TerraTrue determine if a privacy assessment is necessary? for the rules as to when and why a particular kind of assessment is triggered.
Note: DPIA, LIA and PIA assessments can be triggered in the privacy worksheet but TIA assessments may not.
To update this setting, select the assessment in the library, and use the Edit Workflow button to access the workflow builder. Use the Settings button to access the workflow configuration, and choose "Yes" for triggering the assessment in privacy worksheet and press Confirm to save your change. Once confirmed, use the Publish button to save the overall set of assessment workflow changes.
💡 Learn more about assessments in these articles:
• How do I complete privacy assessments (PIAs, LIAs, and DPIAs) with TerraTrue?