🎉 OneTrust 202609.2.0 Released!

We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 202609.2.0.

Data Subject Rights (DSR) Automation

Fixed

• The request schema for the Add Targeted Data Discovery Results Summary to Request API has been updated to correctly reflect supported functionality. The isRedact request parameter has been removed from the API documentation because attachment redaction is supported only by the Add Data Points to Targeted Data Discovery Results Summary API.

Existing Public Preview Features

• New DROP Management APIs
  Added the Create Data Subject Request for DROP Record API, Update DROP Record API, and Get List of DROP Records API to create, update, and retrieve Delete Request and Opt-out Platform (DROP) requests, respectively. These APIs support California-registered data brokers in managing DROP requests for deleting or opting out data subjects permanently.

Mobile App Consent

Existing Public Preview Features

• Consent Management Platform APIs
  The following APIs are available for retrieving the interface attributes needed to display the banner and preference center, retrieving active IAB and Google vendor information, logging consent interactions, and submitting global opt-out data subject access requests. These APIs enable developers to retrieve the data required for banner and preference center experiences, disclose vendor information to end users, capture consent preferences, and support Global Opt-Out workflows across devices and services.
  • Get Banner Data API
  • Get Preference Center Data API
  • Get IAB and Google Vendors API
  • Log Consent API
  • Get Universal Consent Purposes API
  • Submit Global Opt-Out Request API

Third-Party Risk Management

Fixed

• Resolved an issue that prevented the Search Contracts API from returning configured contract attribute values in the attributeValues object of the response.

Universal Consent & Preference Management

General Availability

• Enhancements to Consent Receipts APIs
  Updated the Create Consent Receipts API, Create Identified Consent Receipts API, and Create Consent Receipts in Bulk API to support the InteractionDate request parameter under the purposes object. This enhancement enables purpose-level consent interactions to be recorded independently, providing more granular consent tracking, auditing, and reporting.

Fixed

• Resolved an issue that caused the Update Data Subject Group V4 API to return an error when allowed primary identifier types contained spaces.