---
agentTools:
  projectIndex: https://developer.onetrust.com/onetrust/llms.txt
---

# 🎉 OneTrust 202608.1.0 Released!

We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 202608.1.0 (Summer Release).

<Callout icon="👍" theme="okay">
  For more information about the release and our product updates in the OneTrust Platform, refer to the [OneTrust Release Notes](https://my.onetrust.com/s/release-notes) page. Learn more about environment maintenance on the [Current and Historic Maintenance](https://my.onetrust.com/s/article/Scheduled-Maintenance?topicId=0TO1Q000000FV9KWAW) page, and subscribe to proactive environment notifications on our [System Status and Scheduled Maintenance](https://my.onetrust.com/s/system-status) page.
</Callout>

## Assessment Automation

### General Availability

* **Enhancements to Assessment Automation APIs**<br />The following enhancements have been made to the Assessment Automation APIs:
  * Updated the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/createassessmentusingpost">Launch Assessment V3 API</Anchor> to include the `recordAdminId` request parameter. This parameter specifies the user who will be assigned as the record admin for the assessment.
  * Updated the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getassessmentrecordusingget">Get Assessment Record API</Anchor> to include the `questionResponseWithAiMetadata` response object. This object will return AI-generated answer metadata, including confidence scores, flags, and answer source information.
  * Updated the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getassessmentsusingpost">Get List of Assessments by Criteria API</Anchor> with the following enhancements:
    * Added the `completedBy` response parameter to return the unique identifier of the user who completed the assessment.
    * Added the `assessmentCompletedBy` response object to return details about the user who completed the assessment, such as the full name and email address.
    * Added the `assessmentDetailUrl` response parameter to return a direct link to the assessment.
    * Added the `recordAdminId`, `recordAdmin`, and `recordAdminData` response parameters to return record admin information, including the record admin's identifier and user details.

## Cookie Consent

### General Availability

* **​​Enhancements to the Publish Script to Website API**<br />​​Updated the ​<Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/publishscripttosite">Publish Script to Website API</Anchor>​​ with the following enhancements:

  * Added the `scriptVersion​​` request parameter to specify the SDK version to publish to.
  * Added the `regionRules`​​ request parameter to specify individual geolocation rules that require reconsent.
  * Added the `gaTrackingEnabled`​ and `gaAssignCategory`​​ request parameters to configure Google Analytics event tracking behavior and category assignment.
  * Added the `commonTrackers`​​ request parameter to specify hosts that should be automatically blocked when common tracker auto-blocking is enabled.
  * Added the `​sameSiteNone`​ and `separateCookieByDomain`​​ request parameters to configure cookie behavior for cross-site and partitioned cookie scenarios.
  * Added the `supportSPA`​​ request parameter to support banner reloading for single-page application (SPA) experiences.
  * Added the `supportCSP`​​ request parameter to support Content Security Policy (CSP) configurations that require the use of nonces for inline styles.
  * Added the `autoRefreshEnabled`​​ request parameter to automatically refresh the web page and consent banner after a user submits a consent choice.

  This feature is related to the following idea: ​<Anchor target="_blank" href="https://ideas.onetrust.com/ideas/OT-I-13234">OT-I-13234​​</Anchor>.
  *​​Addendum: This release note was added on August 21, 2026.​​*

## Data Discovery

### General Availability

* **Enhancements to Data Discovery APIs**<br />Added parameter validation to support periods (`.`) in classifier names. This validation has been added for the `classifierName` path parameter in the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getdetectorbyclassifiername">Get Custom Classifier API</Anchor>, <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/updatedetector">Update Custom Classifier API</Anchor>, and <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/deletedetector">Delete Custom Classifier API</Anchor>, and for the `name` body parameter in the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/createdetector">Create Custom Classifier API</Anchor> and <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/updatedetector">Update Custom Classifier API.</Anchor>&#x20;

## Data Subject Rights (DSR) Automation

### Existing Public Preview Features

* **New DROP Management APIs**<br />Added the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/createdroprequestusingpost">Create Data Subject Request for DROP Record API</Anchor> and the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/updatedropusingput">Update DROP Record API</Anchor> to create and update the status of Delete Request and Opt-out Platform (DROP) requests, respectively. These APIs support California-registered data brokers in managing DROP requests for deleting or opting out data subjects permanently.
  > The Create Drop Request API has been renamed to the Create Data Subject Request for DROP Record API. The Update Drop Status API has been renamed to Update DROP Record API.

## Incident Management

### General Availability

* **Enhancements to Incident APIs**<br />Updated the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getincidentdetailbyincidentidusingget">Get Incident API</Anchor> and the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/updateincidentusingput">Update Incident API</Anchor> to return the `attachments` response object that contains attachment details and metadata. This enhancement enables downstream systems to identify attachments and associate them with the originating incident.

## Mobile App Consent

### General Availability

* **New Applications APIs&#x20;**| <Anchor target="_blank" href="https://my.onetrust.com/s/article/UUID-889e72b3-9628-79fb-cec4-171b5001e5be">Available with Solution Packaging Only</Anchor><br />Added APIs to retrieve application scan results, detected SDKs, permissions, and iOS privacy manifest analysis data. These APIs help developers programmatically analyze mobile applications, monitor scan results, identify detected SDKs and permissions, and review iOS privacy manifest compliance data.
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getscans">Get List of Application Scans API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getsinglescan">Get Application Scan API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getscanpermissions">Get List of Scan Permissions API</Anchor>
  - <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getappprivacymanifest">Get Scan Privacy Manifest API</Anchor>

  - <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getappprivacymanifestdatatype">Get Privacy Manifest Data Type API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getscansdks">Get List of Scan SDKs API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getscansdkdetails">Get Scan SDK API</Anchor>

### Fixed

* Resolved an issue that caused restricted linked categories to be included in IAB legitimate interest (LI) consent processing when the App Tracking Transparency (ATT) permission was not granted. Restricted linked categories are now excluded from LI consent calculations and their LI status is returned as inactive (`groupLIConsent = 0`).
* Resolved an issue that caused DSAR requests to fail when using unsupported language codes. The language is now hardcoded to `en-us` to prevent empty translations when a language is not enabled in the web form.
* Resolved an issue that caused the CMP APIs to create separate cache entries for requests that differed only by query parameters. Cache keys now use only the URL origin and pathname while preserving the full URL for request processing, improving cache efficiency and ensuring consistent cache hits across requests with different query parameter values.
* Resolved an issue that caused the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getapplications">Get List of Applications API</Anchor> to return an error when valid requests were submitted.
* Resolved an issue that skipped CCPA consent processing for Age Gate and App Tracking Transparency (ATT) interaction types. Consent processing is now applied consistently for these interaction scenarios.<br />*Addendum: This release note was added on August 14, 2026.*
* Resolved an issue in Age Gate consent processing where an undefined upper age bound could result in incorrect consent range evaluation. Age ranges without a specified upper bound are now treated as open-ended to ensure accurate age eligibility calculations.<br />*Addendum: This release note was added on August 14, 2026.*

### New Public Preview Features

* **New Submit Global Opt-Out Request API**<br />Added the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/post_dsar">Submit Global Opt-Out Request API</Anchor> as part of the CMP APIs to allow applications to submit a Global Opt-Out Data Subject Access Request (DSAR) on behalf of a data subject. This API enables organizations to support global opt-out workflows and honor data subject opt-out preferences across devices and services.<br />*Addendum: This release note was added on August 14, 2026.*
* **Enhancements to Consent Management Platform (CMP) APIs**<br />The following enhancements have been made to the CMP APIs:

  * Added the `GlobalOptOutMobileSectionHeader` and `GlobalOptOutEmailFieldPlaceholderText` keys and removed the `GlobalOptOutDescription` key. These changes enable correct display of the mobile section header and email placeholder text in Global Opt Out implementations.

  * Updated the Global Opt Out implementation to use `customCategoryId` for a group instead of `groupId` when determining the associated purpose. This enhancement ensures purpose values are resolved consistently across languages when new languages are added to the Global Opt Out configuration.

  * Enhanced Age Gate consent string generation to represent hidden, non-actionable purposes as not applicable (`0`) instead of opted out (`1`). When a purpose is hidden because a user is below the permitted age range, generated consent strings now reflect that consent could not be provided, aligning privacy string output with Age Gate behavior.

  * Applied performance optimizations to CMP APIs, reducing response processing times for the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_banner">Get Banner Data API</Anchor>, <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_preferences">Get Preference Center Data API</Anchor>, and <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_vendors">Get IAB and Google Vendors API</Anchor>.

  * Added the `OT-Cache-Status` response header to provide cache hit and miss visibility for CMP API requests. The header returns cache status information for individual fetch operations, helping developers troubleshoot caching behavior and monitor API performance.<br />*Addendum: This release note was added on August 14, 2026.*

  * Added support for the `globalOptOutData` response object in the following APIs to return Global Opt-Out configuration data and UI elements, including linked categories, confirmation messages, instructional content, communication preferences, and display text:

    * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_banner">Get Banner Data API</Anchor>

    * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_preferences">Get Preference Center Data API</Anchor>

    * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_vendors">Get IAB and Google Vendors API</Anchor>

    * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/post_logconsent">Log Consent API</Anchor>

    * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_ucpurposes">Get Universal Consent Purposes API</Anchor> <br />

    *Addendum: This release note was added on August 14, 2026.*

  * Added support for the `ERROR_CODE_GLOBAL_OPT_OUT_NOT_CONFIGURED`, `ERROR_CODE_GLOBAL_OPT_OUT_DISABLED`, and `ERROR_CODE_DSAR` error codes to provide more detailed error handling and troubleshooting for Global Opt-Out and DSAR-related scenarios.<br />*Addendum: This release note was added on August 14, 2026.*

### Existing Public Preview Features

* **Consent Management Platform APIs**<br />The following APIs are now available for use with retrieving interface attributes needed to display the Banner and Preference Center, retrieving a list of active IAB and Google Vendors to display on the Preference Center, and logging consent when an end user interacts with a Banner or Preference Center. These APIs enable you to easily access data for Banner and Preference Center implementations, disclose vendor information to end users, and capture end user consent.
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_banner">Get Banner Data API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_preferences">Get Preference Center Data API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_vendors">Get IAB and Google Vendors API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/post_logconsent">Log Consent API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/get_ucpurposes">Get Universal Consent Purposes API</Anchor>

## Settings & Administration

### General Availability

* **New Documents APIs**<br />Added the new <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getattachmentdownloadtokenv4">Get Download Token API</Anchor> and <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/download">Download Document API</Anchor> to support secure document and attachment downloads through token-based access. These APIs allow developers to generate short-lived download tokens and retrieve document content without exposing direct file access.
* **New Get List of Event Types API**<br />Added the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/geteventtypefilteroptionsget">Get List of Event Types API</Anchor> to retrieve the event types used to track user and system activity. Results can be filtered by product area or record type to help identify relevant audit events.

## Universal Consent & Preference Management

### General Availability

* **​​Enhancements to Bulk Actions Import Template and Bulk Export APIs​​**<br />Change a data subject's identifier type using the ​`CHANGE_IDENTIFIER_TYPE`​ action when using the ​**Consent data subjects bulk actions import**​​ template. This enhancement allows you to specify a new identifier type for multiple data subjects at once.<br />Additionally, leverage the `newIdentifierType` parameter in the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/startexportrunpost">Create Bulk Export API</Anchor> when completing `DATA_SUBJECTS_BULK_ACTION` exports. This parameter allows you to specify the new identifier type to assign to data subjects and is required when the action type is set to `CHANGE_IDENTIFIER_TYPE`.<br />For more information, see <Anchor target="_blank" href="https://my.onetrust.com/s/article/UUID-a2d5963b-4a65-e4e6-6a37-e1d94ac4f809">​Bulk Importing Consent Records</Anchor>​​.<br />*​​Addendum: This release note was updated on August 14, 2026.​​*
* **Enhancements to Universal Consent & Preference Management APIs**<br />Added the `reactivationDate` response parameter to return the date and time when a temporarily paused consent purpose will be automatically reactivated. This enhancement applies to the following APIs:
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getrealtimepreferences">Get Data Subject's Preferences V2 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getdatasubjectprofileusingget">Get List of Data Subjects V1 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/findreceiptusingget">Get Receipt V1 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getv3datasubjectsprofileusingget">Get Data Subject V3 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getv3datasubjectprofilesusingpost">Get List of Data Subjects V3 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getreceiptlistdetailsusingpost">Get List of Receipts V2 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getallprofilesbydatasubjectv4">Get List of All Purpose Details by Data Subject V4 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getdatasubjectprofilesv4">Get List of All Purpose Details for All Data Subjects V4 API</Anchor>

  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getdatasubjectprofilev4">Get Purpose Details by Data Subject V4 API</Anchor>
* **Enhancements to Consent Receipts APIs**<br />The `clearExpiration` object within the `receiptOptions` parameter on the following APIs has been updated to allow users to remove the expiration for purposes configured with a status of Implicit consent from a receipt.
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/createconsentreceiptusingpost">Create Consent Receipts API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/createbulkconsentreceiptusingpost">Create Consent Receipts in Bulk API</Anchor>
  * <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/createidentifiedconsentreceiptusingpost">Create Identified Consent Receipts API</Anchor>

### Fixed

* Updated the `collectionPointType` query parameter in the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getcollectionpointsusingget">Get List of Collection Points API</Anchor> to align with current collection point types.
  * Added: `HOSTED_WEB_FORM`, `EMBEDDED_WEB_FORM`, and `BULK_IMPORT`
  * Removed: `EMAIL`, `CALL_CENTER`, `PAPER`, `IN_PERSON`, and `OTHER`

# August 25, 2026 - 202608.1.9

## Settings & Administration

### Patch Updates

* Resolved an issue that caused the Modify User API to return 400 Bad Request errors when the `schemas` parameter was omitted from the request payload. The <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/patchuserusingpatch">Modify User V2</Anchor> and <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/modifyuser">Modify User V3</Anchor> APIs will continue to accept requests with or without the `schemas` parameter, restoring compatibility with existing SCIM integrations and previous API behavior.

# August 27, 2026 - 202608.1.10

## Cookie Consent

### Patch Updates

* Resolved an issue that caused the <Anchor target="_blank" href="https://developer.onetrust.com/onetrust/reference/getcookiereportsusingpost">Get List of Cookies by Criteria V2 API</Anchor> to return a 500 error when more than 1,000 organizations were present within a tenant.