Ask staff to read and acknowledge a policy

Steps

1. 1

   Open Attestation campaigns

   In Privacy policies and training, select Attestation campaigns. To attest means to confirm that you have read and understood a policy. A campaign sends that request to a group of people and tracks who has done it.

   • Select Attestation campaigns
2. 2

   Select New campaign and name it

   Select New campaign. Under Name, type a name staff will recognise in their task list. Under Description, add a line for your own records.

   • Select New campaign
   • Type Name: Acceptable use policy 2026
   • Type Description: All staff read and acknowledge the acceptable use policy.
3. 3

   Tick the policy to acknowledge

   Under Policies to attest, tick the policy. Its published version is shown beside it. A policy marked not published cannot be acknowledged yet. You can tick several policies. Each becomes a separate task for every person.

4. 4

   Clear Everyone in the organisation

   Under Audience, Everyone in the organisation is ticked to begin with. Clear it to choose who receives the campaign. Three boxes appear: Org units, Roles and People.

   • Select Everyone in the organisation
5. 5

   Choose the audience by org unit

   In Org units, tick the unit whose people should acknowledge the policy. Include sub-units, underneath, adds the units below it. The line under the boxes shows how many people match, with some of their names.

   • Select Head office
6. 6

   Know the other two ways to choose people

   Roles adds everyone who holds a role, such as Employee or Tax manager. People adds named individuals: type in Search people to find them. A person who matches more than one box is still asked only once.

   

7. 7

   Decide about people who join later

   The paragraph explains how a person counts as being in an org unit. Also assign to people who join the audience later is ticked. Leave it ticked so that new joiners are asked too.

8. 8

   Set the due date and the reminders

   Under Dates and reminders, set the Due date, here three weeks from today. Days to complete later assignments is how long a later joiner gets. Remind days before due lists the days on which reminders go out, and Overdue reminder every sets how often a late person is reminded.

   • Type Due date: 2026-11-03
9. 9

   Check who is told when someone is late

   Under Escalation, Escalate after is the number of days overdue before someone else is told. The person's line manager is told first. If the item is still overdue after the same delay again, the entity's data protection officer, the org unit administrators and the campaign owner are told, as ticked.

10. 10

    Select Save draft

    Select Save draft. The campaign opens as a Draft. Nothing has been sent yet. The Set-up box shows what you chose, Edit settings reopens the form, and Delete removes the draft.

    • Select Save draft
11. 11

    Select Launch

    Select Launch. Each person in the audience is notified inside ComplianceOS and finds the policy in My privacy tasks. The campaign becomes Active and lists everyone with the status To do.

    • Select Launch
12. 12

    Read the tiles

    The tiles at the top show the completion percentage, how many tasks are assigned, how many are completed, how many are overdue, and the due date. Re-sync audience assigns the campaign to people who have newly joined the audience, and Close ends the campaign and cancels what is still to do.