myOneTrustDeveloper ForumTechnology Partners
Changelog
Subscribe via RSS
Back to All

🎉 OneTrust 202608.1.0 Released!

August 7th, 2026

We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 202608.1.0 (Summer Release).

👍

For more information about the release and our product updates in the OneTrust Platform, refer to the OneTrust Release Notes page. Learn more about environment maintenance on the Current and Historic Maintenance page, and subscribe to proactive environment notifications on our System Status and Scheduled Maintenance page.

Assessment Automation

General Availability

  • Enhancements to Assessment Automation APIs
    The following enhancements have been made to the Assessment Automation APIs:
    • Updated the Launch Assessment V3 API to include the recordAdminId request parameter. This parameter specifies the user who will be assigned as the record admin for the assessment.
    • Updated the Get Assessment Record API to include the questionResponseWithAiMetadata response object. This object will return AI-generated answer metadata, including confidence scores, flags, and answer source information.
    • Updated the Get List of Assessments by Criteria API with the following enhancements:
      • Added the completedBy response parameter to return the unique identifier of the user who completed the assessment.
      • Added the assessmentCompletedBy response object to return details about the user who completed the assessment, such as the full name and email address.
      • Added the assessmentDetailUrl response parameter to return a direct link to the assessment.
      • Added the recordAdminId, recordAdmin, and recordAdminData response parameters to return record admin information, including the record admin's identifier and user details.

Data Discovery

General Availability

Data Subject Rights (DSR) Automation

Existing Public Preview Features

  • New DROP Management APIs
    Added the Create Data Subject Request for DROP Record API and the Update DROP Record API to create and update the status of Delete Request and Opt-out Platform (DROP) requests, respectively. These APIs support California-registered data brokers in managing DROP requests for deleting or opting out data subjects permanently.

    The Create Drop Request API has been renamed to the Create Data Subject Request for DROP Record API. The Update Drop Status API has been renamed to Update DROP Record API.

Incident Management

General Availability

  • Enhancements to Incident APIs
    Updated the Get Incident API and the Update Incident API to return the attachments response object that contains attachment details and metadata. This enhancement enables downstream systems to identify attachments and associate them with the originating incident.

Mobile App Consent

General Availability

Fixed

  • Resolved an issue that caused restricted linked categories to be included in IAB legitimate interest (LI) consent processing when the App Tracking Transparency (ATT) permission was not granted. Restricted linked categories are now excluded from LI consent calculations and their LI status is returned as inactive (groupLIConsent = 0).
  • Resolved an issue that caused DSAR requests to fail when using unsupported language codes. The language is now hardcoded to en-us to prevent empty translations when a language is not enabled in the web form.
  • Resolved an issue that caused the CMP APIs to create separate cache entries for requests that differed only by query parameters. Cache keys now use only the URL origin and pathname while preserving the full URL for request processing, improving cache efficiency and ensuring consistent cache hits across requests with different query parameter values.
  • Resolved an issue that caused the Get List of Applications API to return an error when valid requests were submitted.

New Public Preview Features

  • Enhancements to Consent Management Platform (CMP) APIs
    The following enhancements have been made to the CMP APIs:
    • Added the GlobalOptOutMobileSectionHeader and GlobalOptOutEmailFieldPlaceholderText keys and removed the GlobalOptOutDescription key. These changes enable correct display of the mobile section header and email placeholder text in Global Opt Out implementations.
    • Updated the Global Opt Out implementation to use customCategoryId for a group instead of groupId when determining the associated purpose. This enhancement ensures purpose values are resolved consistently across languages when new languages are added to the Global Opt Out configuration.
    • Enhanced Age Gate consent string generation to represent hidden, non-actionable purposes as not applicable (0) instead of opted out (1). When a purpose is hidden because a user is below the permitted age range, generated consent strings now reflect that consent could not be provided, aligning privacy string output with Age Gate behavior.
    • Applied performance optimizations to CMP APIs, reducing response processing times for the Get Banner Data API, Get Preference Center Data API, and Get IAB and Google Vendors API.

Existing Public Preview Features

Settings & Administration

General Availability

  • New Documents APIs
    Added the new Get Download Token API and Download Document API to support secure document and attachment downloads through token-based access. These APIs allow developers to generate short-lived download tokens and retrieve document content without exposing direct file access.
  • New Get List of Event Types API
    Added the Get List of Event Types API to retrieve the event types used to track user and system activity. Results can be filtered by product area or record type to help identify relevant audit events.

Universal Consent & Preference Management

General Availability

Fixed

  • Updated the collectionPointType query parameter in the Get List of Collection Points API to align with current collection point types.
    • Added: HOSTED_WEB_FORM, EMBEDDED_WEB_FORM, and BULK_IMPORT
    • Removed: EMAIL, CALL_CENTER, PAPER, IN_PERSON, and OTHER