Universal Consent & Preference Management Settings

Enable this setting to allow users to hard opt-out of one or more purposes on behalf of a data subject and prevent the data subject from giving consent. Selecting Hard Opt Out for a data subject will override any consent given by the data subject, which may be required due to legal or contractual obligations. For more information, see Managing Consent on Behalf of a Data Subject.

Enable this setting to allow collection points to create transactions when a data subject does not give consent with purpose, which will prompt the calculation of Rate of Consent statistics. This in turn increases the Data subject and Transactions report volumes.

Enable this setting to trigger integration events for Not Given transactions. Additional configuration may be required in Integrations.

Enable this setting to allow configuration of consent acknowledgement emails for each specific collection point.

When managing or withdrawing consent on behalf of a data subject, having this setting enabled will require users to submit an entry in the Note field either in the OneTrust platform or through the public API used.

This field can be found in the Withdraw consent modal that appears when you withdraw a data subject's consent on the Data subject details screen.

Enable this setting to allow users to create and manage a list of predefined reasons that can be selected when managing or withdrawing consent on behalf of a data subject. When disabled, reasons for changes in a data subject's consent can be entered manually.

When enabled, users responsible for collection points will receive notification emails starting 24 hours after a collection point has not received any transactions.

This setting allows users to select a new template in the Branding tab of the Preference center details screen when creating or editing a preference center.

This setting allows data subjects to log in to the preference center using their phone number. If enabled, you must define an email address to receive notifications regarding the SMS quota for the account. You can also enter an optional first and last name for the user receiving the email and configure the language in which the email will display.

This setting allows users with the appropriate permissions to permanently delete selected data subject records and all associated transactions. Deleting a data subject record will remove all transactions, purpose consent profiles, data subject identifiers, and data elements associated with the respective data subject.

This setting allows users to trigger data subject deleted events for each data subject that is deleted.

This setting is enabled by default and will automatically add an ISO country code to a data subject profile when a Country type data element is collected in a receipt.

Enable this setting to use JSON Web Key Sets to verify JWT keys when requiring data subject authentication on collection points or when using cross-device consent for Cookie Consent.

Click the Edit button and enter a JWKS URL from which public keys will be fetched. Then click the Submit button.

If storing public key(s) in the platform, ensure the Enable JWKS URL storage setting is disabled. Then click the Add public key button and enter public key(s) that the data subject authorization will be verified against.

Enable this setting to configure whether reminder emails are sent to data subjects that did not confirm their consent through the original confirmation email when the Double opt in setting is enabled for collection points. Once configured, these reminder emails will be sent to the data subject until either the data subject clicks the Confirm button in the email to confirm their consent or the total number of reminder emails has been sent.

Consent Confirmation Retry is the email template used to send reminder emails to data subjects.

Select the total number of times the reminder email can be sent to the data subject after the original email was sent.

Select the amount of time that should pass between each email that is sent to the data subject.

Select the time of day when reminder emails should start being sent to data subjects.

Enable this setting to send reminder emails on Monday through Friday only. Disable this setting to send reminder emails every day of the week.

Enable this setting to configure a time out interval after which a data subject's pending consent is updated to Not Given status.

Set the amount of time that should pass before a new consent receipt is created with Not Given status. If the Consent Confirmation Retries setting is enabled, the time out period will begin after all reminder emails are sent. If the Consent Confirmation Retries setting is disabled, the time out period will begin after the original email is sent.

Enable this setting to map relationships between multiple data subject identifiers. For more information on linked identities, see Linking Data Subject Identifiers.

Enable this setting to limit the identifier types that can be used when selecting a primary data subject identifier for linked identity groups.

When enabled, the Select identifier type field appears where you can select data subject identifier types that can be used as a primary identifier.

The number of data subjects to whom the current magic link settings apply.

The date when the magic link settings were last modified.

The current configuration applied to magic links.

The date when magic link tokens are scheduled to expire.

Enable this setting to create data subjects access tokens that they can use to securely access the preference center or Trust Center.

Selecting Always active, magic links do not expire and remain permanently active, allowing data subjects to reuse them to access their preference center or Trust Center at any time.

The Single-use selection configures magic links to expire after accessing the preference center/Trust Center.

The Time-based expiration option resets access tokens. Upon token expiration, a new token is generated. Data subjects are able to log into the preference center or Trust Center again using the new token.

Enter the number of months the magic links will remain valid. This setting appears only if the Time-based expiration option is selected.

This functionality is intended for verifying all magic link tokens and regenerating those that may be faulty or potentially compromised. If you require all magic links to be refreshed, please create a support ticket.

Enable this setting to temporarily disable access to preference centers and Trust Centers via magic links. While suspended, magic link tokens will not grant access to the preference center or Trust Center. However, data subject tokens will remain intact and are not revoked, allowing access to be restored when reactivated.