PIA & Data Mapping Platform

NEW California Consumer Privacy Act of 2018 Initial Planning Assessment!

Watch The Demo

The IAPP-OneTrust tool automates accountability through readiness and privacy impact assessments (PIAs or DPIAs) with questionnaire and risk-tracking workflows, as well as builds and maintains data flows and inventories to help meet the record-keeping obligations of Article 30. Now including new California Consumer Privacy Act of 2018 Initial Planning Assessment.


The IAPP-OneTrust tool enables organizations to:

  • Generate appropriate record keeping reports
  • Choose from pre-defined assessment templates
  • Modify templates or create custom questionnaires
  • Distribute assessments to internal and external parties
  • Populate inventory with apps and processing activities
  • Identify, track and mitigate risks through workflows

Free Tool Registration

Get Access to the Resource

Why do we ask for this information? The resources we provide on our website contain OneTrust intellectual property related to our products and research. In an effort to protect this IP, we ask for your basic contact details to help us validate your identity before we open access to these resources.

Are you interested in learning more about the paid, full version of our platform?*

Would you like to receive emails from OneTrust about other resources, products and services? You can unsubscribe at any time.*

Privacy Notice

You can learn more about how we handle your personal data and your rights by reviewing our privacy notice.

Featured Products:

Assessment Automation:(PIA and DPIA):

Tailor and distribute assessments, review gaps, track mitigating activities, and generate appropriate record keeping reports

Data Inventory & Mapping:

Maintain and update data flows, applications, and processing activities to meet Article 30 record keeping obligations.

California Consumer Privacy Act (CCPA) of 2018 Initial Planning Assessment

Leverage our new CCPA Initial Planning Assessment to understand the potential impact of the new law on your organization.

Also Included:

Consent Management

Manage user consent and preferences with adaptable settings for various consent standards

Website Tracker Scanning

Conduct a privacy scan of your website to identify and categorize tracking technologies

Data Subject Rights Portal (DSAR)

Capture data subject requests, manage workflows to fulfill, handle responses securely and consistently, and maintain records of fulfilling requests