DocumentationmyOneTrustDeveloper ForumTechnology Partners
Changelog
Subscribe via RSS
Back to All

November 13, 2026 - 202611.1.0 (Fall Release)

November 13th, 2026

We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 202611.1.0 (Fall Release).

👍

For more information about the release and our product updates in the OneTrust Platform, refer to the OneTrust Release Notes page. Learn more about environment maintenance on the Current and Historic Maintenance page, and subscribe to proactive environment notifications on our System Status and Scheduled Maintenance page.

AI Governance

Fixed

  • Resolved an issue that prevented the Create Object API from reusing a model name after the existing model was renamed.

Assessment Automation

Fixed

  • Resolved an issue that caused the Export Template API to omit keys with null values, such as responseCount, option, and optionId, from the response schema.
  • Resolved an issue that prevented update and delete requests through the Manage Assessment Question Attachments API from returning results, with users instead seeing an access denied message.

Cookie Consent

General Availability

  • Enhancements to Cookie Consent APIs
    Updated the Cookie Consent APIs with the following enhancements:
    • Added the useDistinctScriptSrc request parameter to the Publish Script to Website API to generate a dedicated otSDKStub.js file for the domain. When enabled, the test script source URL changes and the script implemented on the website must be updated.
    • Added the isNewlyRemoved response parameter to the Get List of Added or Removed Cookies API to indicate whether a cookie was removed compared with the previous scan.
    • Updated the type response parameter in the Get Template Details API to support IAB Canada (IABC) display group types for purposes, stacks, features, special purposes, special features, and data categories. The following enum values are now supported: IABC_PURPOSE, IABC_STACK, IABC_FEATURE, IABC_SPL_PURPOSE, IABC_SPL_FEATURE, IABC_DATA_CATEGORY.
    • Updated the API documentation for the id path parameter in the Scan Application API and Get Application Scan API and the scanId path parameter in the Get Application Scan API to provide clearer guidance for retrieving application and scan identifiers.

Fixed

Data Subject Rights (DSR) Automation

General Availability

Fixed

  • Resolved an issue that caused the Create Request API to return a status of UN_PROCESSED instead of FAILED when a required email was missing from the request.

Enterprise Policy Management

General Availability

  • New Exceptions APIs
    Added the Search Exceptions API and Get Exception API to retrieve and search document exceptions across Tech Risk & Compliance (TRC). The EXCEPTION and EXCEPTION_READ OAuth scopes are now available to provide access to these APIs when configuring client credentials in Global Settings. These APIs provide programmatic access to exception data, reducing the need to manually export and manipulate data for reporting or third-party tools while supporting enterprise policy exception management use cases across TRC.

Mobile App Consent

General Availability

  • Consent Management Platform APIs
    The following APIs are available for retrieving the interface attributes needed to display the banner and preference center, retrieving active IAB and Google vendor information, logging consent interactions, and submitting global opt-out data subject access requests. These APIs enable developers to retrieve the data required for banner and preference center experiences, disclose vendor information to end users, capture consent preferences, and support Global Opt-Out workflows across devices and services.

  • Consent SDK APIs for Web SDKs

    Added Web SDK support across CMP APIs to provide a shared foundation for delivering consent experiences across platforms. This enhancement helps customers maintain more consistent consent behavior, scale Web SDK deployments across large website portfolios, adapt to changing privacy requirements, and support contextual and custom consent experiences. Specific details are captured within the following updates:

    • Web SDK Support for the Log Consent API
    • Web SDK Support for the Get IAB and Google Vendors API
    • Web SDK Support for the Get Banner Data API
    • Web SDK Support for the Get Preference Center Data API

    For more information, refer to the cmpapi-202611.1.0 Release Notes and Changelog. This feature is related to the following ideas: OT-I-9796, OT-I-10670, OT-I-16661.

Settings & Administration

General Availability

  • New Roles APIs
    Added the Get List of Roles API and Get Role API to retrieve system and custom roles available in the tenant, with the new ROLE_READ OAuth scope providing read access to these APIs. These APIs provide an authoritative way to discover and validate tenant roles, reducing reliance on manual role ID retrieval for user provisioning, access reconciliation, and other access management workflows.

Fixed

  • Resolved API documentation issues to properly reflect parameter requirements across various Access Management, Documents, and SCIM APIs to align with actual API behavior.

Universal Consent & Preference Management

General Availability

  • New Data Elements API
    Added the Add Data Element Option API to add a new option to a selection-type data element. New options are available for future use and do not affect existing data subjects or historical consent receipts.
  • Always Available Collection Point Token API
    Added a new high availability Get Collection Point Token API to provide uninterrupted access to collection point tokens during maintenance periods. This API enables developers and system integrations to reliably retrieve collection point tokens without disruption during scheduled maintenance windows.

Fixed