What steps do web CMP customers need to take?

Beginning with version 202510.1.0, the web SDK will include the sections required for TCF 2.3 to send consent strings.

OneTrust suggests testing this version first in staging or lower environments before rolling it out to production.

OneTrust has prepared these changes well ahead of the enforcement deadline, but please note that some vendors may not yet be prepared to accept the updated strings until February 28th, 2026.

After successful testing, republish your web CMP to any version after 202510.1.0 to adopt the TCF 2.3 changes.

The eupubconsent cookie that is generated will be split due to its size, as it contains the TC string.