myOneTrustDeveloper ForumTechnology Partners
Changelog
Subscribe via RSS
Back to All

🎉 OneTrust 202608.1.0 Released!

August 7th, 2026

We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 202608.1.0 (Summer Release).

👍

For more information about the release and our product updates in the OneTrust Platform, refer to the OneTrust Release Notes page. Learn more about environment maintenance on the Current and Historic Maintenance page, and subscribe to proactive environment notifications on our System Status and Scheduled Maintenance page.

Assessment Automation

General Availability

  • Enhancements to Assessment Automation APIs
    The following enhancements have been made to the Assessment Automation APIs:
    • Updated the Launch Assessment V3 API to include the recordAdminId request parameter. This parameter specifies the user who will be assigned as the record admin for the assessment.
    • Updated the Get Assessment Record API to include the questionResponseWithAiMetadata response object. This object will return AI-generated answer metadata, including confidence scores, flags, and answer source information.
    • Updated the Get List of Assessments by Criteria API with the following enhancements:
      • Added the completedBy response parameter to return the unique identifier of the user who completed the assessment.
      • Added the assessmentCompletedBy response object to return details about the user who completed the assessment, such as the full name and email address.
      • Added the assessmentDetailUrl response parameter to return a direct link to the assessment.
      • Added the recordAdminId, recordAdmin, and recordAdminData response parameters to return record admin information, including the record admin's identifier and user details.

Data Discovery

General Availability

Data Subject Rights (DSR) Automation

Existing Public Preview Features

  • New DROP Management APIs
    Added the Create Data Subject Request for DROP Record API and the Update DROP Record API to create and update the status of Delete Request and Opt-out Platform (DROP) requests, respectively. These APIs support California-registered data brokers in managing DROP requests for deleting or opting out data subjects permanently.

    The Create Drop Request API has been renamed to the Create Data Subject Request for DROP Record API. The Update Drop Status API has been renamed to Update DROP Record API.

Incident Management

General Availability

  • Enhancements to Incident APIs
    Updated the Get Incident API and the Update Incident API to return the attachments response object that contains attachment details and metadata. This enhancement enables downstream systems to identify attachments and associate them with the originating incident.

Mobile App Consent

General Availability

Fixed

  • Resolved an issue that caused restricted linked categories to be included in IAB legitimate interest (LI) consent processing when the App Tracking Transparency (ATT) permission was not granted. Restricted linked categories are now excluded from LI consent calculations and their LI status is returned as inactive (groupLIConsent = 0).
  • Resolved an issue that caused DSAR requests to fail when using unsupported language codes. The language is now hardcoded to en-us to prevent empty translations when a language is not enabled in the web form.
  • Resolved an issue that caused the CMP APIs to create separate cache entries for requests that differed only by query parameters. Cache keys now use only the URL origin and pathname while preserving the full URL for request processing, improving cache efficiency and ensuring consistent cache hits across requests with different query parameter values.
  • Resolved an issue that caused the Get List of Applications API to return an error when valid requests were submitted.
  • Resolved an issue that skipped CCPA consent processing for Age Gate and App Tracking Transparency (ATT) interaction types. Consent processing is now applied consistently for these interaction scenarios.
    Addendum: This release note was added on August 14, 2026.
  • Resolved an issue in Age Gate consent processing where an undefined upper age bound could result in incorrect consent range evaluation. Age ranges without a specified upper bound are now treated as open-ended to ensure accurate age eligibility calculations.
    Addendum: This release note was added on August 14, 2026.

New Public Preview Features

  • New Submit Global Opt-Out Request API
    Added the Submit Global Opt-Out Request API as part of the CMP APIs to allow applications to submit a Global Opt-Out Data Subject Access Request (DSAR) on behalf of a data subject. This API enables organizations to support global opt-out workflows and honor data subject opt-out preferences across devices and services.
    Addendum: This release note was added on August 14, 2026.

  • Enhancements to Consent Management Platform (CMP) APIs
    The following enhancements have been made to the CMP APIs:

    • Added the GlobalOptOutMobileSectionHeader and GlobalOptOutEmailFieldPlaceholderText keys and removed the GlobalOptOutDescription key. These changes enable correct display of the mobile section header and email placeholder text in Global Opt Out implementations.

    • Updated the Global Opt Out implementation to use customCategoryId for a group instead of groupId when determining the associated purpose. This enhancement ensures purpose values are resolved consistently across languages when new languages are added to the Global Opt Out configuration.

    • Enhanced Age Gate consent string generation to represent hidden, non-actionable purposes as not applicable (0) instead of opted out (1). When a purpose is hidden because a user is below the permitted age range, generated consent strings now reflect that consent could not be provided, aligning privacy string output with Age Gate behavior.

    • Applied performance optimizations to CMP APIs, reducing response processing times for the Get Banner Data API, Get Preference Center Data API, and Get IAB and Google Vendors API.

    • Added the OT-Cache-Status response header to provide cache hit and miss visibility for CMP API requests. The header returns cache status information for individual fetch operations, helping developers troubleshoot caching behavior and monitor API performance.
      Addendum: This release note was added on August 14, 2026.

    • Added support for the globalOptOutData response object in the following APIs to return Global Opt-Out configuration data and UI elements, including linked categories, confirmation messages, instructional content, communication preferences, and display text:

      Addendum: This release note was added on August 14, 2026.

    • Added support for the ERROR_CODE_GLOBAL_OPT_OUT_NOT_CONFIGURED, ERROR_CODE_GLOBAL_OPT_OUT_DISABLED, and ERROR_CODE_DSAR error codes to provide more detailed error handling and troubleshooting for Global Opt-Out and DSAR-related scenarios.
      Addendum: This release note was added on August 14, 2026.

Existing Public Preview Features

Settings & Administration

General Availability

  • New Documents APIs
    Added the new Get Download Token API and Download Document API to support secure document and attachment downloads through token-based access. These APIs allow developers to generate short-lived download tokens and retrieve document content without exposing direct file access.
  • New Get List of Event Types API
    Added the Get List of Event Types API to retrieve the event types used to track user and system activity. Results can be filtered by product area or record type to help identify relevant audit events.

Universal Consent & Preference Management

General Availability

Fixed

  • Updated the collectionPointType query parameter in the Get List of Collection Points API to align with current collection point types.
    • Added: HOSTED_WEB_FORM, EMBEDDED_WEB_FORM, and BULK_IMPORT
    • Removed: EMAIL, CALL_CENTER, PAPER, IN_PERSON, and OTHER