diff --git a/CHANGES b/CHANGES
index d87e86a96d..c88380912f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5590.	[bug]		Process NSEC3PARAM queue when loading a dynamic zone.
+			This will immediately create NSEC3 records for zones
+			that use "dnssec-policy" and "nsec3param". [GL #2498]
+
 5589.	[placeholder]
 
 5588.	[func]		Add "purge-keys" option to "dnssec-policy". This sets
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index c08c6f6954..54733d22c3 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -54,5 +54,8 @@ Bug Fixes
   UDP sockets that we enabled during the DNS Flag Day 2020 to fix this issue.
   [GL #2487]
 
+- NSEC3 records were not immediately created when signing a dynamic zone with
+  ``dnssec-policy`` and ``nsec3param``. This has been fixed [GL #2498].
+
 - An invalid direction field (not one of 'N'/'S' or 'E'/'W') in a LOC record
   triggered an INSIST failure. [GL #2499]