Daily release/9 26 24 afternoon

src/content/docs/security/security-privacy/data-privacy/data-privacy-new-relic.mdx

@@ -14,6 +14,10 @@ redirects:
 freshnessValidatedDate: never
 ---
 
+import nr1FindUserActivityDatainMetricsandEvents from 'images/nr1_screenshot-full_Find-user-activity-data-in-Metrics-and-events.webp'
+
+import nr1FindUserActivityDatainNrql from 'images/nr1_screenshot-full_Find-user-activity-data-in-nrql.webp'
+
 New Relic takes your data privacy seriously. Our principles-based approach aims to go beyond the legal requirements for consent. We understand your concerns when you entrust us with your data, and we always strive to embrace your expectations and preferences.
 
 This document provides links to detailed information about the privacy and security measures we take to protect you and your customers' data privacy. Our monitoring tools are data-agnostic; they don't require sensitive materials, and many of them don't require any personal data.
@@ -48,7 +52,7 @@ For more information about annual audits, see [Regulatory audits for New Relic s
 
 If you have further questions, please contact your account team, or [privacy@newrelic.com.](mailto:privacy@newrelic.com.) Please note that we are unable to provide assistance to our customers with privacy questions via any third party platforms, including, e.g., any data privacy or data privacy compliance platforms. The only method by which we can provide assistance is as set out above.
 
-## Privacy by design and by default [#default]
+## Privacy by design and by default [#privacy-default]
 
 New Relic follows "privacy by design" principles as part of our overarching security program. For example, when New Relic agents capture a webpage or referrer URL, all query parameters are stripped by default.
 
@@ -102,7 +106,7 @@ Here are examples of how we incorporate privacy considerations into our data and
   </Collapser>
 </CollapserGroup>
 
-## Account security
+## Account security [#account-security]
 
 Our role-based account structure gives you direct control over who can access or change your account settings. For more information, see [Users and roles](/docs/accounts/accounts-billing/new-relic-one-user-management/introduction-managing-users).
 
@@ -133,6 +137,104 @@ Our role-based account structure gives you direct control over who can access or
   </Collapser>
 </CollapserGroup>
 
+## Audit New Relic user activity [#audit-user-activity]
+
+New Relic collects user activity data when a user queries for data or makes configuration changes within an organization. You can query these events to address security-related concerns around user activity within your New Relic organization. Surfacing user activity information empowers security-sensitive customers to understand how members of their org access data in the New Relic platform. 
+
+You can surface user activity information with these events:
+
+<table>
+    <thead>
+        <tr>
+            <th style={{ width: "200px" }}>
+                Event name
+            </th>
+            <th>
+                Event description
+            </th>
+        </tr>
+    </thead>
+    <tbody>
+        <tr>
+            <td>
+                [`NRAuditEvent`](/attribute-dictionary/?event=NrAuditEvent)
+            </td>
+            <td>
+                Records user activity when a user makes service configuration changes within your New Relic organization 
+            </td>
+        </tr>
+        <tr>
+            <td>
+                [`NrdbQuery`](/attribute-dictionary/?event=NrdbQuery)
+            </td>
+            <td>
+                Records user activity when a user queries data within the account
+            </td>
+        </tr>
+    </tbody>
+</table>
+
+You can surface user activity data by going to **[one.newrelic.com](https://one.newrelic.com) > All Capabilities**, then working with two capabilities: **Metrics & Events** and **Query your data**. In general, you can use:
+
+* Metrics & Events for looking at broad, general trends
+* Query your data for answering specific, scoped questions with NRQL queries 
+
+<CollapserGroup>
+    <Collapser
+        id="metrics-events"
+        title="Surface event data in Metrics & Events"
+    >
+
+To surface user activity information, go to **[one.newrelic.com](https://one.newrelic.com) > All Capabilities > Metrics & Events**, then search for either `NrAuditEvent` or `NrdbQuery` from the **Event type** column. For example:
+
+<img
+    title="Find user activity data in Metrics & Events"
+    alt="A screenshot that shows how to find events and attributes for user activity data"
+    src={nr1FindUserActivityDatainMetricsandEvents}
+/>
+
+<figcaption>
+    Go to **[one.newrelic.com](https://one.newrelic.com) > All Capabilities > Metrics & Events**: Search `NrAuditEvent` or `NrdbQuery` from the **Event type** column, then click **Dimensions** to view attributes.
+</figcaption>
+
+You can select **Raw data** to view event attributes as key-value pairs. Attribute keys like ID, description, or timestamp are organized in the table's horizontal row while their values are listed out in the table's columns. Keep in mind that these attributes are subject to [data limits](/docs/data-apis/manage-data/view-system-limits). 
+
+    </Collapser>
+    <Collapser
+        id="query-your-data"
+        title="Query event data with NRQL"
+    >
+
+You can also use our **Query your data** tool to retrieve attributes and fields of interest. For example, take this example query:
+
+    ```sql
+    FROM NrdbQuery SELECT user, query, productCapability, source.name where user = 'demonewrelic@gmail.com' limit max since 1 week ago until 1 day ago
+    ```
+
+<img
+    title="Query user activity data"
+    alt="A screenshot that shows how to query events to answer specific questions about user activity data"
+    src={nr1FindUserActivityDatainNrql}
+/>
+
+<figcaption>
+    Go to **[one.newrelic.com](https://one.newrelic.com) > All Capabilities > Query your data**: Build a query to answer specific questions about user activity.
+</figcaption>
+
+This query surfaces data from the `NrdbQuery` event but limits the data to:
+
+     * These attributes: `SELECT user, query, productCapability, source.name`
+     * A specific user: `where user = 'demonewrelic@gmail.com'`
+     * With no set maximum number of results: `limit max`
+     * Scoped to this time parameter: `since 1 week ago until 1 day ago`
+
+This surfaces data about specific parameters rather than showing broad trends like in Metrics & Events. 
+
+We recommend reviewing [How to query with NRQL](/docs/nrql/get-started/introduction-nrql-how-nrql-works) to learn more about using NRQL syntax to surface the information you need. 
+
+    </Collapser>
+</CollapserGroup>
+
 ## Security for products and services [#product-security]
 
 We publish [security bulletins](/docs/using-new-relic/new-relic-security/security/security-bulletins) with detailed information about vulnerabilities, remediation strategies, and applicable updates for affected software.