🎉 OneTrust 202607.1.0 Released!

We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 202607.1.0.

Assessment Automation

General Availability

• New Assessment Comments APIs
  Added the Create Assessment Comment API and Get Assessment Comments API to create a new comment on an assessment question and retrieve all comments for a given assessment, respectively. This enhancement provides support for comment creation and retrieval for assessments through public, API-driven workflows.
• New Get Assessment Score Profiles API
  Added the Get Assessment Score Profiles API to retrieve comprehensive score profile information for an assessment. This API provides a detailed question-level score breakdown, helping you understand how each question contributed to the overall profile score.
• New Get Assessment Record API
  Added the Get Assessment Record API to retrieve assessment details with more flexibility. By default, the showAllDetails query parameter is set to false which returns a lightweight record with only basic information, sections, questions, and responses. When showAllDetails: true, the full assessment export is returned. This API offers a lightweight assessment retrieval option for improved performance.

Data Discovery

Fixed

• Resolved an issue that caused the Create Scan Profile and Update Scan Profile APIs to fail due to incorrect systemName validation.

Data Subject Rights (DSR) Automation

New Public Preview Features

• New DROP Management APIs
  Added the Create Drop Request API and the Update Drop Status API to create and update the status of Delete Request and Opt-out Platform (DROP) requests, respectively. These APIs support California-registered data brokers in managing DROP requests for deleting or opting out data subjects permanently.

IT Risk Management

General Availability

• Enhancements to IT Risk Management APIs
  The following enhancements have been made to the IT Risk Management APIs:
  • Added the associatedAttributeValueInformation object to include attribute option information in the Create Multiple Vulnerabilities, Update Vulnerabilities, Create Multiple Threats, and Update Threats APIs.
  • Updated the Get List of Evidence Task Implementations API with the following enhancements:
    • Added the approver object to the response for evidence approver tracking.
    • Added the collectionStartMonth response parameter for collection period tracking.
    • Added the aiEvidenceAnalysisResult object to the response to return AI evidence analysis results with scoring and indicators.
  • Updated the Update Control API to include the viewOnly response parameter for read-only control tracking.
  • Updated the Create Multiple Vulnerabilities, Update Vulnerabilities, Create Multiple Threats, and Update Threats APIs to include the optionSelectionValue parameter within the attributes object of the request.
  • Updated the Update Vulnerabilities and Update Threats APIs to include the displayLabel parameter in both the request and response for display labeling.
  • Updated the Search Control Implementation Attributes API with the following enhancements:
    • Added the optionsByDomain object to the response. This object contains attribute domain option override information for domain-specific option overrides.
    • Added the formulaByDomain object to the response. This object contains attribute formula details for domain-specific formulas.
    • Added the displayResponseType response parameter for interface display type specification.
    • Added the optionListUrl, optionType, permissions, and applicationUrl parameters to the optionMetadata object of the response.
  • Updated the fileDescription parameter to optional instead of required for the Attach Files to Control Implementation API.
  • The max length of the description parameter value in the Create Control, Update Control, and Update Control Implementation APIs has increased from 3000 to 4000.

Mobile App Consent

Fixed

• Resolved an issue that caused default category consent toggles to turn off after users accepted the iOS App Tracking Transparency (ATT) prompt when no categories were linked to ATT.

Existing Public Preview Features

• Consent Management Platform APIs
  The following APIs are now available for use with retrieving interface attributes needed to display the Banner and Preference Center, retrieving a list of active IAB and Google Vendors to display on the Preference Center, and logging consent when an end user interacts with a Banner or Preference Center. These APIs enable you to easily access data for Banner and Preference Center implementations, disclose vendor information to end users, and capture end user consent.
  • Get Banner Data API
  • Get Preference Center Data API
  • Get IAB and Google Vendors API
  • Log Consent API
  • Get Universal Consent Purposes API