Universal Consent & Preference Management FAQ

Managing Receipts, Transactions, and Data Subject Records

Can I extract consent receipts from the application?

Yes. You can contact your OneTrust Consultant to submit a request to access your receipt storage. Your OneTrust Consultant will then contact the respective OneTrust Product Team to process the request and provide you with the access key so that you can download and review your data. For more information, see Extracting Consent Receipts from the Application.

Can I include data elements along with transactions in a single file?

Yes. This is supported in the Stream Consent Receipts import template by adding the "dsDataElements":{} attribute to the list of payloads, as needed. Data elements and transactions should be uploaded separately when utilizing other import templates.

Can I delete data subject records?

Yes. You can delete data subject records and all associated transactions from the application. But note that deleting a data subject record will remove all transactions, purpose consent profiles, data subject identifiers, and data elements associated with that data subject.

Data subject deletion can be performed using the Delete Data Subjects API or in the application. For more information on this procedure, see Deleting Data Subject Records.

Is any information retained in the application after a data subject record is deleted?

When a data subject record is deleted, the history of the number of data subject records deleted, the date of deletion, and the user that completed the action is retained. You can view this history by clicking the View Activity button on the Data Subjects screen.

Can I delete Purposes from a data subject profile?

You can delete Purposes from a data subject profile in instances where the record was added incorrectly and should not exist. Deleting Purposes from a data subject profile will delete all underlying transactions but will retain the receipt. In addition, a record of the deletion will appear on the User Activity tab.

Note: You should only delete Purposes from a data subject profile if the record was added incorrectly or added as a result of a test. Otherwise, please consider whether marking the Purpose as Withdrawn would be more appropriate for your use case. For more information, see

Managing Consent on Behalf of a Data Subject

.

Can I set Magic Links as single use?

Yes. The Set Magic Links as Single Use setting configures magic links to expire after being accessed. If enabled, the Magic Link Recycle Rate (Months) setting will disappear.

What is the recommended file format when bulk importing consent records?

The recommended file format will vary based on the import template, as detailed below:

  • Use .csv format for the Create / Update Data Subject Consent import template

  • Use .xlsx for the Create Historic Data Subject Consents and Create/Update Consent Data Subjects import templates

  • Use .jsonl or jsonl.gz for the Stream Consent Receipts import template

Is there a limit to the amount of data I can upload in one file during a bulk upload?

If using the Create / Update Data Subject Consent, Create Historic Data Subject Consents, or Create/Update Consent Data Subjects import templates, uploads should be limited to 50,000 rows per file.

If using the Stream Consent Receipts import template, uploads should be limited to 250,000 data subject consent records. Nonetheless, if you are importing more than these limits for the respective template, please contact OneTrust Support in advance before performing the import.

Additionally, Stream Consent Receipt files must be less than 64 MB so using jsonl.gz can help you reach that 250,000 record per file capacity.

How long does a bulk import typically take to complete?

If you are using bulk import templates, the traffic will be processed at 3.3k - 4.1k records per minute. Data subject profiles are known to take longer to complete due to the size and amount of data elements that need to be processed.

Managing Collection Points

Can I disable a Collection Point?

Yes. You can disable a Collection Point to temporarily or permanently stop the generation of receipts. This provides additional security and a way to retire a Collection Point that is no longer needed. For more information, see Disabling and Enabling a Collection Point.

Is it possible to test end-to-end Collection Point workflows?

You can test end-to-end Collection Point workflows by creating receipts using test data subjects, which can help you evaluate and adjust the Collection Point configuration before publishing.

Note:

You can apply the Test Status filter on the Data Subjects screen to narrow down the list of data subjects to only those labeled with Test, which can help you quickly identify and delete test data as needed.