Configure a OneTrust Integration
API docs for OneTrust are part of the storage module.
Overview
OneTrust is a DSAR automation provider that provides an interface to manage privacy requests.
Fidesops handles the integration to OneTrust to fulfill Data Subject Requests and returns the data package back to OneTrust.
How it works
Here's how our OneTrust integration works:
- You set up a new storage destination of type
onetrust
- A new scheduled task kicks off that pings OneTrust for subtasks labeled for fidesops
- Fidesops processes those DSARs normally
- Upon completion of DSAR processing, we do 2 things:
- Ping OneTrust to set the subtask status appropriately
- If applicable, upload a data package back to OneTrust
Configuration
Fidesops
OneTrust request intake is configured as part of the StorageConfig
in the storage module. To configure fidesops to connect to OneTrust:
- Add Destination: Add a
StorageConfig
that includes aonetrust
destination type. - Authenticate: Use appropriate credentials to authenticate with OneTrust.
- Determine polling interval: Decide what day of the week and hour of the day you wish to retrieve requests from OneTrust.
More information on storage destinations can be found here.
OneTrust
When the fidesops scheduled task runs, it looks for subtasks with an exact string name of "fides task". So, you'll need to be sure tasks you wish to pass through the Fides ecosystem are correctly labeled in the OneTrust interface.
Testing
To test the OneTrust integration works correctly, you'll need to do the following:
- Ensure that you have subtasks with a name of "fides task" in OneTrust
- Set your OneTrust destination config in Fides such that day of week and hour of request intake is appropriate for testing
- Confirm that the subtask status has been updated at that time, and any DSAR data packages have been uploaded at the request level in OneTrust