The OneTrust Privacy & Data Governance Cloud helps companies adopt best-in-class privacy practices, so individuals trust them with their data, allowing them to deliver more valuable experiences and create business value through trust.
The following APIs are available for areas within the Privacy & Data Governance Cloud.
Cookie Consent
| Overview | Details |
|---|---|
| Description | The Cookie Consent module is used to help customers collect, store, manage, audit, and report on user consent within their digital properties. OneTrust offers a variety of web and mobile SDK products to manage user consent collection based on the jurisdiction of that user’s country. The products also make adopting and adhering to industry frameworks like IAB TCF 2.0 and IAB CCPA, a much simpler process for your organization’s product teams. The end result of using these products is getting the better insight into who is opting into and out of various services like personalized advertising, device permissions, and marketing analytics. The products also help keep your organization compliant by providing transparency, audit trails, and record keeping each time consent is updated by the user. For more information on Cookie Consent, see the Cookie Consent Knowledge Base. |
| Use Cases | - Add new websites - Retrieve a list of scanned or pending to be scanned websites - Retrieve the scripts for the websites - Create new cookies and retrieve cookie report details - Publish configuration changes to the website |
| Available APIs | Cookie Consent APIs Cookie Domain Data APIs |
Cross Device Consent
| Overview | Details |
|---|---|
| Description | Cross Device Consent is the ability to share and link consent given by a user on one Website or Mobile App across your other managed Websites and Mobile Apps. This is achieved through a user profile that contains the consent given by the user from the first property interaction. The user profile is shared across the protected OneTrust cloud to additional devices or browsers where the user chooses to roam, safely creating a seamless user experience. For more information, see Cross-Domain and Cross-Device Consent. |
| Use Cases | - Retrieve client-side consent preferences |
| Available APIs | Cross Device Consent APIs |
Data Catalog
| Overview | Details |
|---|---|
| Description | OneTrust Data Catalog module enables you to manage your organization's data and associated metadata in order to enact policies and procedures necessary for proper data governance. Using Data Catalog, you can create terms that define data across your organization and glossaries to further organize your organization's terms. For more information on Data Catalog, see the Data Catalog Knowledge Base. |
| Use Cases | - Retrieve data asset attributes - Retrieve all glossaries - Manage terms - Retrieve classification tags |
| Available APIs | Data Asset Attributes APIs Glossary APIs Tags APIs Terms APIs |
Data Discovery
| Overview | Details |
|---|---|
| Description | OneTrust Data Discovery is an AI-powered data discovery and classification solution integrated into the full OneTrust platform. It is powered by the OneTrust Athena artificial intelligence, robotic automation engine, and regulatory insights from OneTrust DataGuidance. Data Discovery helps organizations discover and classify structured and unstructured data across cloud, on-premises accounts, and legacy systems and assets. For more information on Data Discovery, see the Data Discovery Knowledge Base. Data Discovery APIs are broken into two categories: cloud services and worker node services. The cloud services APIs target the OneTrust application. These endpoints interact with the OneTrust application and enable you to complete administrative actions in the Data Discovery module. |
| Use Cases | - Manage scan profiles - Manage data sources - Manage scan jobs - Manage credentials |
| Available APIs | Data Discovery APIs |
Data Mapping Automation
| Overview | Details |
|---|---|
| Description | Data Mapping Automation is a highly configurable tool designed to help your organization in mapping the movement of personal data throughout various systems and business functions. You can also identify risks and demonstrate compliance with privacy laws and regulations. For more information on Data Mapping Automation, see the Data Mapping Automation Knowledge Base. |
| Use Cases | - Manage inventories - Manage inventory relationships - Manage personal data - Manage schema of inventory records |
| Available APIs | Data Mapping Automation APIs |
Incident Management
| Overview | Details |
|---|---|
| Description | The Incident Management module can be used to report, analyze, manage, and correct dangerous and at-risk events that occur within an organization or customer base that impact user information. For more information on Incident Management, see the Incident Management Knowledge Base. |
| Use Cases | - Create new incidents - View and retrieve incident details - View and manage incidents |
| Available APIs | Incident Management APIs |
Mobile App Consent
| Overview | Details |
|---|---|
| Description | OneTrust Mobile App Consent helps customers collect, store, manage, audit, and report on user consent within their mobile apps. OneTrust offers a variety of Mobile SDK products that are implemented on iOS and Android apps to manage this user consent collection based on the jurisdiction of that user’s country. The SDK products also make adopting and adhering to industry frameworks like IAB TCF 2.0 and IAB CCPA a much simpler process for your mobile app product teams. The end result of using these SDKs is getting the better insight into who is opting into and out of different mobile-specific services like personalized advertising, device permissions, and marketing analytics. The SDKs also help keep your organization compliant by providing audit trails and record keeping each time consent is updated by the user. For more information on Mobile App Consent, see the Mobile Consent Knowledge Base. |
| Use Cases | - Retrieve SDK Configuration |
| Available APIs | Mobile App Consent APIs |
PIA & DPIA Automation
| Overview | Details |
|---|---|
| Description | The PIA & DPIA Automation module empowers organizations to effectively manage risks by conducting privacy and security assessments created using custom or pre-existing assessment templates. PIA & DPIA Automation streamlines the process of collecting information regarding projects and inventories, automatically identifies risks, and provides in-depth visualizations and reporting capabilities. For more information on PIA & DPIA Automation, see the PIA & DPIA Automation Knowledge Base. |
| Use Cases | - Retrieve existing assessment details - Manage the assessment life cycle - Create a risk on an assessment - Retrieve details on published templates |
| Available APIs | PIA & DPIA Automation APIs Assessment Template APIs |
Policy & Notice Management
| Overview | Details |
|---|---|
| Description | Policy & Notice Management allows users to create and manage the policies published to their websites from a central location, which allows users to make updates independently of their site owners and developers. For more information on Policy & Notice Management, see the Policy & Notice Management Knowledge Base. |
| Use Cases | - Retrieve a list of all policies - Retrieve details of the latest version of a given policy - Retrieve a list of all versions of a given policy |
| Available APIs | Policy & Notice Management APIs |
Privacy Rights Automation
| Overview | Details |
|---|---|
| Description | OneTrust Privacy Rights Automation enables organizations to streamline their Data Subject Access Requests (DSAR) life cycle processes by leveraging intake templates, automated workflows, identity verification measures, secure messages portals, database audit preparedness, and Targeted Data Discovery (TDD). These powerful features allow privacy professionals to accommodate large volumes of requests while responding to each within a proper fulfillment time range, effectively and efficiently. For more information on Privacy Rights Automation, see the Privacy Rights Automation Knowledge Base. |
| Use Cases | - Create and manage requests - Create and manage subtasks on requests - Add Targeted Data Discovery results to requests - Create and manage verification methods on requests - Manage resolution codes |
| Available APIs | Privacy Rights Automation APIs |
Training
| Overview | Details |
|---|---|
| Description | Training enables organizations to train and educate their workforce on privacy and security topics with the Privacy Core library of learning content. This helps organizations to implement Privacy Core library, originally developed by the IAPP, to facilitate training and educational requirements. Using Training, you can enroll and unenroll the users from training courses, view the details of their course assignment, and resend enrollment notifications. For more information on Training, see the Training Knowledge Base. |
| Use Cases | - Retrieve the list of courses - Manage course enrollment for different users |
| Available APIs | Training APIs |
Universal Consent & Preference Management
| Overview | Details |
|---|---|
| Description | Consent & Preference Management allows users to create records of consent given by a data subject for a particular purpose of processing. Integrating Consent & Preference Management into your organization’s data collection and management processes enables you to keep an audit trail of where and when consent was obtained, the data the consent relates to, the purpose of processing, and the information notices given. The extensive APIs and integration options provide the ability to synchronize consent statuses to your organization’s operational systems that rely on the consent for carrying out lawful data operations. For more information on Consent & Preference Management, see the Consent & Preference Management Knowledge Base. Note: Consent APIs are available only for those with full Universal Consent (UC) license. |
| Use Cases | - Manage purposes of processing - Manage Collection Points - Set consent for new and existing data subjects - Create new data subjects - Retrieve lists of data subjects and their consent profiles - Retrieve the list of preference centers - Retrieve a history of data subject interactions - Manage linked identity groups - Manage merge request schedules |
| Available APIs | Consent & Preference Management APIs Consent Receipts APIs |