🎉 OneTrust 202505.1.0 Released!
We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 202505.1.0 (Spring Release).
For more information about the release and our product updates in the OneTrust application, refer to the OneTrust Release Notes page. Learn more about environment maintenance on the Current and Historic Maintenance page, and subscribe to proactive environment notifications on our System Status and Scheduled Maintenance page.
Cookie Consent
General Availability
- New Scans APIs: The following APIs are now available for use to start, cancel, and archive scans, and to retrieve scan information including domains, status, results, a list of scans for a specific website, and a list of cookies added or removed since the website’s last scan.
- New Domains APIs: The following APIs are now available for use to schedule scans and cancel scheduled scans for a specific domain.
- New Cookies APIs: The following APIs are now available for use to recategorize, add, edit, and delete cookies in bulk, and to retrieve a list of cookies based on filter criteria.
Existing Public Preview Features
- Bulk Export APIs: The following APIs are now available for use to create and cancel bulk exports and retrieve their status, progress, download details, and credit details. These APIs enable users to extract large volumes of cookie receipts, consent receipts, and data subjects at once with a limit of six bulk exports per month.
Data Catalog
General Availability
- Data Asset Management APIs: The following APIs are now available to create, modify, and delete data assets, as well as manage tag and term associations in bulk for specific data assets in your data catalog. These APIs empower users to configure terms, tags, additional attributes, or users for data assets.
Issues Management
Things to Know
- The following changes have been made to the Issues Management APIs:
- Updated the following APIs to include the
category
,sourceType
,sourceId
,status
,createdBy
, andcreatedDate
parameters. This enhancement allows you to capture additional issue record metadata to improve data quality and increase data understanding. - The
INTEGRATIONS
scope has been added to all Issues Management APIs. This scope allows external systems to invoke the Integration service API in their OAuth 2.0 security scheme.
- Updated the following APIs to include the
Mobile App Consent
General Availability
- SDK Adoption of New CMP Architecture: Upgrade to the new OneTrust rearchitected CMP SDKs for a more robust and efficient performance. The following system architecture enhancements have been made to streamline operations and improve the user experience:
- Faster load times that enhance the overall performance with a reduction in the SDK size.
- Server-side management which eliminates the need for SDK updates whenever regulations change.
- Built-in scalability that enables you to effortlessly remain compliant as consent frameworks evolve.
For more information, see OneTrust Next Generation CMP SDKs.
Existing Public Preview Features
- Consent Management Platform APIs: The following APIs are now available for use with retrieving interface attributes needed to display the Banner and Preference Center, retrieving a list of active IAB and Google Vendors to display on the Preference Center, and logging consent when an end user interacts with a Banner or Preference Center. These APIs enable you to easily access data for Banner and Preference Center implementations, disclose vendor information to end users, and capture end user consent.
Things to Know
- The following changes have been made to the Consent Management Platform (CMP) APIs:
- Updated the Get Banner Data API to include the
ageGate
parameter within the prompts object of the response. This enhancement enables age verification and restrictions on your banner when accessing specific content or services, ensuring compliance with legal regulations and suitable content displays for your audience.
- Updated the Get Banner Data API to include the
Policy Management
Fixed
- Resolved an issue that prevented the Update Existing Collection Point API from adding a notice from Privacy Notice Management to a collection point.
Universal Consent & Preference Management
General Availability
- New Get Data Subject’s Preferences V2 API: The Get Data Subject’s Preferences V2 API is now available for use to retrieve real-time consent. This API allows you to retrieve the data subject’s consent status right after they have given consent, providing you with immediate readback of the latest consent status.
The Real-Time Consent feature is available to purchase. With this add-on, new data will be available from this API in up to 4 seconds. Without this add-on, new data will be available from this API in up to 30 seconds. To purchase this feature, please contact your account representative or OneTrust Sales.
- New Parameter for Get List of Collection Points: Updated the Get List of Collection Points API to add the
disabled
parameter in the response. This enhancement allows you to easily find and view when a collection point is disabled, providing you better visibility of the collection point status.
Fixed
- Resolved an issue that prevented the Get List of Receipts API from returning the correct
organizationId
value in the response when calling the API using thereceiptId
query parameter. - Merging data subjects either via the Create Consent Receipts API or the Deduplicate Data Subjects API is now working as expected. Data subjects are now successfully merged when the primary and the additional identifiers contain the same mobile phone number regardless of whether a country code value is provided for the additional identifier.
- The response of the Get List of Data Subjects API now returns data subject records without duplicate results when passing the
requestContinuation
parameter to paginate in the next API request.
Existing Public Preview Features
- High-Performance Data Subject APIs: High-performance Data Subject APIs are now available for use when retrieving data subjects' basic details, purpose details, email link tokens, and associations with Data Subject Groups. These APIs improve existing Data Subject APIs by offering multiple, separate APIs with more targeted queries to increase efficiency by providing faster response times.
The Data Subjects V4 APIs are under Public Preview and use of these APIs will require a migration. Please contact OneTrust Support to request access.
- Get Data Subject API
- Get Data Subject Details API
- Get List of All Purpose Details by Data Subject API
- Get Purpose Details by Data Subject API
- Get List of All Purpose Details for All Data Subjects API
- Get List of Data Subjects API
- Get List of Data Subject Group Members API
- Get List of Data Subject Group Associations by Data Subject API
- Get Data Subject Token API
- Get List of Data Subject Tokens API
- Bulk Export APIs: The following APIs are now available for use to create and cancel bulk exports and retrieve their status, progress, download details, and credit details. These APIs enable users to extract large volumes of cookie receipts, consent receipts, and data subjects at once with a limit of six bulk exports per month.