All Solutions Release Notes

Read the release notes for all solutions in this release on a single page.

AI Governance

AI Governance - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Shared Control Implementations for AI Governance Inventories

Create shared control implementations and evidence tasks for projects, datasets, and models. You can also merge multiple implementations of the same library control into a single control or split a single implementation into several controls. This feature allows you to reduce the sprawl of control implementations created within your organization by removing redundant controls.

Key capabilities include:

Inventory Flexibility: Choose which inventories align to controls to provide greater flexibility when creating and updating records.
Relationship Management: Add inventories to existing control implementations or associate additional controls directly to inventories.
Merge & Split Controls: Merge multiple implementations of the same library control or split a shared control into single implementations for each inventory
Evidence Tasks: Create and manage evidence tasks to collect, review, and validate evidence related to controls.

Unified Purpose

Gain full oversight into all aspects involved in processing personal data with the Purpose object. Available in Global Data Manager, this centralized object type provides cross-solution insights into how personal data collected for that given purpose is used across your business, so that you are better able to associate objects like data elements, processing activities, vendors, collection points, and projects through a common and central object.

For more information, see Unified Purpose Feature Guide.

@Mentions for AI Systems, Datasets, Models, and Projects

AI Systems
Datasets
Models
Projects

This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

While some screens already feature updated headers, not all enhancements are applied universally and may vary depending on the screen's functionality and context. Enhancements to additional screens may also become visible across the next several releases.

For more information, see Screen Header Enhancements Across the OneTrust Platform.

New Public Preview Features

Automated AI Discovery

Continuously scan, detect, and catalog AI models and agents across your AWS-native ecosystem. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Amazon SageMaker Integration for AI Governance Models

Automated AI Discovery

Discover and catalog AI models, notebooks, and experiments across Google Cloud while maintaining centralized governance controls. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Google Vertex Integration for AI Governance Models.

Metadata for Datasets

|Available with Solution Packaging Only

Improve data use governance functions by automating dataset evaluation and surfacing metadata that clarifies data quality, sensitivity, and readiness. This accelerates access request reviews, ensures responsible data usage, and helps teams build AI models on compliant, trustworthy datasets, which enhances both accuracy and oversight.

Risk Aggregation for Related Records

Enable systemic risk visibility across linked inventory objects in AI Governance. When enabled, parent objects (such as AI Systems or Projects) inherit risks from related child entities (such as Models or Datasets), allowing organizations to automate comprehensive risk views.

For more information, see Risk Aggregation for Related AI Records.

Purpose Data Usage

Drill into specific purposes across the platform and inspect their usage details. This central reporting screen provides privacy managers a central location for monitoring where a given purpose is used to better manage those records.

For more information, see Unified Purpose Feature Guide.

Existing Public Preview Features

Export Inventory Records to Column Report

Create a report of all records of a specific inventory and the columns eligible for bulk import, or the current saved view of an inventory screen including applied filters. This provides you with two flexible reporting methods to gather comprehensive insights into inventory records.

For more information, see Exporting AI Inventory Records.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Permissions

Invited users and custom role users can now be granted access to AI Governance-based assessments via emails without the necessary permissions to access AI Governance.

Consent & Preferences

Cookie Consent - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Two-Step Confirmation Modal for CMP

Configure your CMP to display a two-step confirmation modal when a user’s consent would conflict with a previous opt-out. This enhancement is designed to inform users more explicitly of potential conflicts in their consent configurations.

For more information, see Customizing the Banner Template and Customizing the Preference Center Template

Configure Purposes by Organization

View and configure purposes by organization on the redesigned Purposes screen. This enhancement improves access to and visibility of purposes based on your organizational hierarchy. Users are now limited to the purposes available to their organizational level when configuring the CMP.

For more information, see Managing and Categorizing Cookies and SDKs.

Enhanced Support for Opt-Out Preference Signal (OOPS)

Capture the source of user opt-outs when users opt out manually or via browser signals, such as Global Privacy Control (GPC) and Do Not Track (DNT). This enhancement allows you to differentiate between manual and signal-based opt-outs in consent logs. This enhancement also prevents users from disabling the Opt-Out Signal Notification setting on CPRA and CCPA (legacy) templates.

For more information, see. Leveraging the Global Privacy Control (GPC) Signal.

Insights Reporting for A/B Testing Exports

View Insights analytics for A/B tests when exporting results from the Report tab of the Test details screen. This enhancement allows you to view enhanced reporting and analytics on Testing center exports.

For more information, see Configuring A/B Testing.

Compliance Assistant

|Available with Solution Packaging Only

Evaluate your CMP implementation for compliance with various legal frameworks using the Compliance assistant interface. This feature enables you to view potential risks for noncompliance across your domains and provides suggestions to improve your configurations.

Note:

Free trials of the Compliance Assistant feature will end with the 202512.1.0 release.

For more information, see Leveraging CMP Compliance Assistant.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that prevented Vendor List Link text from displaying in full on IAB TCF preference centers accessed via mobile browsers.
Resolved an issue that prevented the Selector value field on the Authentication tab of the Website details screen from saving values consistently when configuring settings for behind-authentication scans.

New Public Preview Features

Get List of Bulk Export Download Details API: Added the new Get List of Bulk Export Download Details API to the Bulk Export APIs to retrieve the download details for a bulk export with paginated results. This API allows you to pass the continuationToken and size parameters, optimizing response times and mitigating any possible timeout errors.

Existing Public Preview Features

Enhanced Auto-Blocking Interface

Leverage an improved Auto-Blocking experience, featuring a redesigned safe list, block list, and match list. The enhanced Auto-Block tab is designed for a quicker and easier user experience when reviewing and blocking URLs.

For more information, see OneTrust Cookie Auto-Blocking (Enhanced Interface).

Banner SEO Configuration

Deploy your banner script with header (<h>) tags replaced as paragraph (<p>) tags for improved search engine optimization.

For more information, see Publishing and Implementing Cookie Consent Scripts, or contact OneTrust Support or your account representative.

Support for Multi-Language Privacy Policy Links

Configure privacy policy links in multiple languages on the Dynamic Links section of the Website Details screen. This feature enables you to offer privacy policy links and information in each language relevant to your business needs.

For more information, see Configuring Domain Branding.

Enhanced State Support for the Global Privacy Platform

The Global Privacy Platform (GPP) settings now support consent strings for the following US states:

Delaware
Iowa
Nebraska
New Hampshire
New Jersey
Tennessee

For more information, see Configuring Global Privacy Platform Settings.

Bulk Export APIs

The following APIs are now available for use to create and cancel bulk exports and retrieve their status, progress, download details, and credit details. These APIs enable users to extract large volumes of cookie receipts at once with a limit of six bulk exports per month.

Authenticated Consent for New and Existing Users

Transfer consent from local storage to new and existing data subject IDs (DSIDs) for user profiles when leveraging Cross-Device Consent. This enhancement allows you to apply previously captured consent to user profiles to streamline consent collection.

Always Inactive Consent State

Leverage the new Always Inactive consent state to allow users to display tracking technologies that are present but not enabled on their websites. This consent state enables you to notify your end users that a tracking technology is deployed but not active.

For more information, see Cookie Consent Models and Configuring Geolocation Rules.

Enable Global Privacy Platform on TCF 2.2 Templates

Enable the Global Privacy Platform setting on TCF 2.2 templates. This setting allows you to enable the IAB Tech Lab - Global Privacy Platform (GPP) and populate the IAB TCF EU section of the GPP string.

For more information, see Configuring the Global Privacy Platform Settings.

Vendor Identification, Categorization, and Consent

Vendor Identification, Categorization, and Consent enables you to categorize any vendor services on your website and provide detailed consent options to your visitors. This feature streamlines vendor disclosure and consent by detecting known services and linking them to tracking technologies. Leverage Vendor Service Identification, Categorization, and Consent to perform the following actions:

Identify known vendor services when scanning your websites.
Categorize the vendor services active on your websites.
Link tracking technologies to identified vendor services.
Allow end users to configure consent for vendor services on the Preference Center.
Capture records of consent at the vendor service level.
Configure IAB templates to capture and disclose vendor service information.
View source URLs for tag initiators on the Initiators tab of the Scan Results screen.

For more information, see Vendor Identification, Categorization, and Consent Feature Guide.

Legitimate Interest Configuration for Reject All on IAB Templates

Implement a Reject All button on your Preference Center and Cookie Banner that prevents objection to legitimate interest. This enhancement improves compatibility with Google Limited Ads.

For more information, see Customizing the Preference Center Template.

Server-Side Rendering

Server-side rendering is now available for Cookie Banner HTML and CSS.

For more information, see Server-Side Rendering: Performance and Availability.

Accessibility Conformance

Image elements (<img>) no longer leverage role=image and are identified as images by assistive technology (WCAG-A: 4.1.2 Name, Role, Value).
When accessing the Preference Center using the Firefox browser, keyboard focus now automatically moves to the first interactive control (e.g., button, input, link) within the dialog (WCAG-A: 1.3.1 Info and Relationships).

Things to Know

Web Button Customizations

As a result of thefeature (Define the Order of Buttons on the CMP) that became generally available in 202508.1.0, users may notice some changes in the HTML and CSS of their CMP.

For more information, see CMP Expanded Release Notes.

When leveraging Cross-Domain and Cross-Device Consent for the web CMP, you can now enable thePreserve consent for logged out userssetting to prevent the banner from resurfacing for logged out users.

When publishing scripts, users can now prevent cookies created specifically for a top level site domain from being shared with other top level domains using the same iFrame by enabling theSeparate cookies by domainsetting on thePublishmodal

Note:

This setting is only available when the Enable SameSite + None setting is enabled for a script.

For more information, see Publishing and Implementing Cookie Consent Scripts.

When publishing scripts, users can now enable theRefresh page upon interactionsetting to allow the web page and consent banner to refresh automatically after users configure their consent preferences.

For more information, see Publishing and Implementing Cookie Consent Scripts.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Tip:

For more information on Consent Management Platform (CMP) release notes, click here.

Mobile & OTT/CTV App Consent - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Mobile iOS and Android SDK WCAG Compliance

Accessibility enhancements to iOS and Android SDK user interfaces have been introduced to comply with WCAG 2.2 AA standards and the European Accessibility Act. This update allows you to deliver a more accessible experience to a wider audience when integrating your mobile SDKs.

For more information, see OneTrust Mobile App Consent VPAT Report.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed Admin

Resolved an issue that prevented the Mobile App Scan integration workflow from triggering correctly when using some built-in webhook trigger actions. Success status logs are now registered and error access messages are no longer returned.

Fixed Android

Resolved an issue where scanning .apk files failed resulting in a scan error. The UTF8-encoded string length has been corrected to enable support for strings exceeding 0x80 characters.
Resolved an issue where the getConsentStatusForSDKId method returned incorrect values starting with the OneTrust 202507.1.0 release.

Fixed iOS

Resolved an issue where an Always Active group or SDK consent was incorrectly returned as 0 when a user performed a Reject All save action and immediately queried for consent before the consent logging process completed. An incorrect status is no longer reflected in the SDK broadcast after interaction saving.
Resolved an issue that caused the banner to display before and after the App Tracking Transparency (ATT) prompt when startSDK was called for the first time on the React Native SDK.

Existing Public Preview Features

Consent Management Platform APIs

The following APIs are now available for use with retrieving interface attributes needed to display the Banner and Preference Center, retrieving a list of active IAB and Google Vendors to display on the Preference Center, and logging consent when an end user interacts with a Banner or Preference Center. These APIs enable you to easily access data for Banner and Preference Center implementations, disclose vendor information to end users, and capture end user consent.

Roku Support for Unified Consent Profile for Known Users

Leverage the new Unified Consent Profile for Known Users functionality to connect data subjects' CMP preferences with Universal Consent & Preference Management profiles by enabling the Create data subject profiles for known users setting on the Geolocation Rules tab. You can also easily trigger integration workflows to send CMP preferences to downstream systems, and efficiently manage your preferences in a unique Preference Center, centralizing all of them in one single profile.

This enhancement provides a comprehensive view of data subjects empowering you with more control over the data captured across both modules, resulting in a more streamlined and tailored user experience.

For more information, see Connecting CMP preferences with Universal Consent & Preference Management Profiles.

Configure Button Layout for the Banner

Configure the positioning of buttons on your mobile and CTV banners within the Button Sets section of the Template Details screen. This enhancement allows you to specify the positioning of buttons on your banners for a more customized experience.

iOS
Android

For more information, see Customizing the Mobile App Consent Banner Template and Customizing the Mobile App Consent Preference Center Template.

Enhanced Branding Settings for Mobile and CTV SDKs

Configure detailed branding settings for your mobile SDKs on the Branding tab of the Mobile App Details and CTV App Details screen, respectively. This enhancement enables you to configure more specific branding settings for each of your mobile and CTV applications.

For more information, see Configuring Mobile and CTV App Branding.

Validation for Cross-Device Consent Receipts

Enable the Require Authentication for known users setting when leveraging Cross-Device Consent to require validation on your consent receipts. This enhancement allows you to more reliably collect consent from known users.

For more information, see Configuring Geolocation Rules.

Note:

This enhancement is only available to users with the Consent Rate Optimization (CRO) add-on package. Contact OneTrust Support or your account representative to enable this functionality.

To learn more, see Maximize Opt-Ins with Consent Rate Optimization.

Authenticated Consent for New and Existing Users

This feature is available for the following platforms:

iOS
Android
Apple TV
Android TV

Enable Global Privacy Protocol on TCF 2.2 Templates

Enable the Global Privacy Protocol setting on TCF 2.2 templates. This setting allows you to enable the IAB Tech Lab - Global Privacy Protocol (GPP) and populate the IAB TCF EU section of the GPP string.

This feature is available for the following platforms:

Android
Android TV
Apple TV
HTML5
iOS
Roku
Unity
Xamarin

For more information, see Configuring the Global Privacy Protocol Settings.

New Reject All Button Configuration

Enable the updated Reject All button configuration on the Preference Center template. This new configuration ensures that legitimate interest is not impacted for customers using Google Ads.

For more information, see Customizing the Mobile App Consent Preference Center Template.

Things to Know

The following changes have been made to the Consent Management Platform (CMP) APIs:
- Updated the Get Banner Data, Get Preference Center Data, and Log Consent APIs to add the IABTCF_VendorsDisclosed and IABGPP_TCFEU2_VendorsDisclosed parameters within the storageKeys object of the response. This enhancement ensures compliance with the latest IAB TCF v2.3 specification.
The new Mobile SDKs powered by the CMP API now return the latest consent given when changing regions, ensuring consistent platform behavior aligned with the Web CMP experience.
Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Tip:

For more information on Consent Management Platform (CMP) release notes, click here.

Policy & Notice Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Privacy Notice Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Privacy Notice US Template Enhancements

Build privacy notices using the updated U.S. Multistate Privacy Notice – 2.3 template in the Gallery. This template replaces the existing U.S. Multistate Privacy Notice -2.2 version and simplifies notice creation by allowing users to configure privacy notices using a pre-configured template.

For more information, see Using the Privacy Notice Gallery.

Privacy Notice EU Template Enhancements

Build privacy notices using the updated EU Multi-State Privacy Notice – 1.1 template in the Gallery. This template replaces the existing EU Multi-State Privacy Notice – 1.0 version and simplifies notice creation by allowing users to configure privacy notices using a pre-configured template.

For more information, see Using the Privacy Notice Gallery.

@Mentions for Privacy Notices

Mention users directly within comments to draw their attention or request their input, triggering both an in-app notification and email notification. @Mention functionality is now supported in comments on privacy notices. This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Existing Public Preview Features

Privacy Notice Insights Dashboard

Utilize highly customizable reporting and analytic capabilities using the new Privacy Notice Insights Dashboard to analyze data captured across Privacy Notice Management. This dashboard can be used to view key metrics related to privacy notices, workflows, and notice expiration details.

For more information, see Insights Privacy Notice Management Dashboard.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Universal Consent & Preference Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Introducing the Trust Center Portal

Leverage the new Trust Center to deliver a consistent, branded experience across your organization, while simplifying the process for managing user settings and choices. Trust Center allows you to centralize all privacy-related user experiences into a single, intuitive customer portal interface, enhancing platform efficiency and elevating the user experience.

Trust Center key features include:

Unified portal: Designed as a platform app, it brings together all consent preferences and privacy requests into a single interface. As a platform component, the Trust Center will over time replace UCPM preference centers and DSAR portal implementations.
Fast deployment: Set up your portal in a few clicks and customize the look and feel quickly with intuitive controls.
Easy to align with your brand identity: Ensure full alignment with your organization’s visual and brand guidelines applying and rearranging your layouts to customize your portal adapted to your branding.
Accessible and localizable: Trust Center has been built for global audiences with full localization language support, responsive layouts, and accessibility best practices.

For more information, see Getting Started with Trust Center, Creating a Trust Center, and Suggested Trust Center Setups.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Snowflake Native App Improvements

The OneTrust Consent Management native app in Snowflake now provides you with purpose status and purpose version to define data masking policies, allowing you to connect consent data and leverage multiple consent statuses for a more detailed consent selection. In addition, data subject identifier type is available as a profile attribute for data subjects. These enhancements increase efficiency, reducing the time spent on configuration and streamlining the rule creation process.

For more information, see OneTrust Consent Management App for Snowflake.

Major and Minor Purpose Changes

Select the type of change for your purpose of processing on the Purpose details screen when creating a new version. This enhancement allows you to have more control and clarity over consent changes, strengthening compliance and reinforcing regulatory alignment. In addition, the Purpose Published integration event has been added to consent integration events in Integrations. This enhancement allows you to trigger an event each time a new version of a purpose is published, enabling programmatic decision-making such as initiating a re-consent workflow or other automated actions, providing you with a more seamless integration across systems.

For more information, see Understanding Purpose Versioning, Setting Up Purposes of Processing, and Consent Integration Events.

Copy a Preference Center into a Trust Center

Migrate an existing preference center into a Trust Center from the available actions on the Preference centers screen. This enhancement allows you to easily duplicate your current preference center configuration and automatically migrate all compatible components to your Trust Center setup, saving you time and simplifying the setup process.

For more information, see Copying a Preference Center into a Trust Center.

Protected Magic Link Settings

The Magic links screen in Consent Global Settings has been updated to provide more robust protection for magic link settings. This enhancement allows you to configure reinforced controls to prevent accidental misuse, providing you with a more stable and reliable platform experience.

For more information, see Universal Consent & Preference Management Settings.

Unified Purpose

For more information, see Unified Purpose Feature Guide.

High-Performance Bulk Import Multi-File Support

Upload multiple files clicking the Select file button on the New import modal when using the Stream consent receipts bulk import type. This enhancement allows you to select multiple files simultaneously from any folder on your operating system, improving the user experience through a more streamlined and efficient process.

Get List of Bulk Export Download Details API

Added the new Get List of Bulk Export Download Details API to the Bulk Export APIs to retrieve the download details for a bulk export with paginated results. This API allows you to pass the continuationToken and size parameters, optimizing response times and mitigating any possible timeout errors.

New Public Preview Features

Purpose Data Usage

For more information, see Unified Purpose Feature Guide.

Fixed

Resolved an issue that prevented the Data Subject Consent report from accurately displaying the latest transaction date and most recent consent status, causing mismatches between the information provided on the platform and calling the v1 Get List of Data Subjects API. These discrepancies, previously caused by data synchronization delays, no longer occur.
Resolved an issue that prevented consent integration event payloads from returning data for the LastInteraction parameter, causing integration workflows to remain in halted state.
Resolved an issue where purposes were not populating correctly on the Data model and metadata screen of the OneTrust Consent Management native app in Snowflake.
Resolved an issue where the Get Data Subject Details API returned multiple privacy notice versions associated with the same purpose. A new logic has been implemented to ensure that previous notice versions are replaced by the latest applicable version.
Resolved an issue that prevented the one-click unsubscribe functionality from working as expected.
Resolved an issue that caused the pagination controls at the bottom of the Scheduled items screen to be hidden when viewing consent retention policies on the Data retention menu.
Resolved an issue that caused data subject identifier values to display incorrectly as “Processing…” on the Transactions tab of the Receipts screen after bulk importing consent records using the Create / Update Data Subject Consent import template. In addition, a related issue where the identifier parameter returned a null value in the response of the Get List of Transactions API has also been resolved.
The v4 Get List of Data Subject Group Members API now returns information about updates to data subject groups performed either through the Groups screen on the platform or via the v2 Update Data Subject Group API.
Resolved an issue that prevented the Get Data Subject Details API from returning the correct privacy version after submitting an old notice version through the Create Consent Receipts API.
The Get Data Subject Details API no longer returns details of parent data subjects when passing a data element in the identifier header parameter.
Resolved an issue that prevented the Create Consent Receipts API from transferring purposes after data subject merge when enableDataElementDateValidation was set to true.
Resolved an issue where the v4 Get Data Subject Token API returned an outdated data subject link token, while the v1 Get List of Data Subject Tokens API and the platform correctly displayed the latest token. Link tokens are now consistently aligned across API responses and the user interface.
Resolved an issue where an error message appeared for data subjects containing accented characters when using the Exclude data subjects from deletion bulk import template even when the data subject existed in the account and was visible on the Profiles screen.
Resolved an issue where deleted data subject profiles associated with multiple purposes were still appearing in consent reports, resulting in the dashboard incorrectly displaying a count of one rather than zero after deletion.

Existing Public Preview Features

CMP Consent Context: Added support to our existing data hierarchy to allow CMP consent users to provide consent for a purpose multiple times when using consent groups. When using consent groups with the unified profile feature, the CMP will use the same data subject for different consent groups, eliminating the need to create additional profiles.

Things to Know

Error 500 responses returned by the v4 Data Subject APIs have been standardized to comply with established API conventions, such as OpenAPI and JSON error schema. These messages now follow a predictable format to maintain consistency.

Accessibility Conformance

Screen readers correctly announce the CAPTCHA code and display the corresponding background color for the CAPTCHA field when navigating OneTrust hosted web form collection points (WCAG-A 1.1.1: Non-text Content and WCAG-A 4.1.2: Name, Role, Value).

Data Use Governance

Data Catalog - October 27, 2025 - 202510.2.0

General Availability

Data Policy Insights

|Available with Solution Packaging Only

Leverage centralized, actionable insights for data policy and usage violations, which enables teams to proactively identify, investigate, and address non-compliant behavior. This enhances governance, supports audit readiness, and reduces the risk of data misuse for responsible, compliant data practices across the organization.

For more information, see Data Policy Insights.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Existing Public Preview Features

Data Governance Insights Dashboard

Utilize highly customizable reporting and analytic capabilities using the Data Governance Insights Dashboard to analyze data captured across Data Catalog. This dashboard can be used to view essential information about your data assets, manage your data and associated metadata in response, and enact policies and procedures necessary for proper data governance.

For more information, see Insights Data Governance Dashboard.

Access Intelligence Insights Dashboard

Now enabled for every Data Catalog customer, data governance managers can now utilize highly customizable reporting and analytic capabilities using the Access Intelligence Insights Dashboard that collects data captured by Data Catalog and Data Discovery. This dashboard can be used to understand what sensitive data you have and how it is shared across the company so admins can quickly identify data-related risks present in your data ecosystem.

For more information, see Insights Access Intelligence Dashboard.

Note:

This dashboard is available by default only for Data Catalog customers.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Data Discovery - October 27, 2025 - 202510.2.0

General Availability

Intelligent Sampling Scanner Support for RDBMS

Configure scan profiles with an efficient and unbiased sampling approach to maintain accuracy and representation across an entire dataset. This enhancement allows data teams to rapidly understand and classify their data, make faster governance decisions, reduce processing costs, and catch possible critical patterns or sensitive data distributed throughout their data sources.

For more information, see Setting Up Scan Profiles.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Existing Public Preview Features

Script Management

Run common maintenance and troubleshooting scripts directly from the platform in the new Administration tab. This reduces the need for command line interface (CLI) access or coordination with support by providing an effective and easy way to execute critical scripts.

For more information, see Script Management for Worker Nodes.

Note:

Originally introduced under General Availability in OneTrust 202504.1.0. This has been changed to Public Preview in OneTrust 202505.1.0.

Duplicate File Detection

Identify duplicate and redundant files with AI-driven analysis based on key risk attributes (classification, shared access) and make decisions on whether to retain or remove duplicates. This enhancement helps you reduce redundant data, decrease attack surface, and improve security posture with savings on cloud storage costs.

For more information, see Reviewing Scanned Files.

Data Discovery Insights Dashboard

Utilize highly customizable reporting and analytic capabilities using the Data Discovery Insights Dashboard to analyze data captured across the module. This dashboard can be used to view information about job insights, scan metrics, worker node progress, and more related to your discovery business outcomes.

For more information, see Insights Data Discovery Dashboard.

Things to Know

The Snowflake Connector now supports the following authentication methods:

Basic Authentication
Programmatic Access Token (PAT) Authentication
Key-Value Pair Authentication

For more information, see Snowflake Connector.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Platform Capabilities

Dashboards & Reporting - October 27, 2025 - 202510.2.0

General Availability

Multi Tab Export

Export all tabs of a column report using the new Excel with all tabs option that is now available when manually exporting a report or configuring a report schedule. This allows you to generate a single Excel file that contains all data configured for the report.

Note:

The report download can take up to an hour to complete depending on data volume. This option is not available for Consent and Cookie Consent column reports.

For more information, see Exporting a Report and Scheduling a Report.

Activity Tracking in Column Reports

Create activity-based column reports to extract activity information for various data sources and data types across the platform using the new Create Activity Report option. This enhancement allows you to extract audit logs in an Excel or CSV format, empowering you to report on activities across various objects to understand how your key performance indicators and values have changed over time.

Note:

Enabling the activity report during creation will only provide activity data in a column report that can be exported. This will not export the current state of primary data. Disable the activity report if you would like to export information related to the current state of data.

All fields, including the report name, data source, report type, and data type must be completed for the option to appear.

For more information, see Creating an Activity Report.

Simplified Object-Based Attribute Configuration in Insights Dashboards

Manage the custom object-based attributes that appear on tabs within your custom Insights Dashboards using the new Attribute configuration modal. With this enhancement, you can now configure visuals for individual dashboard tabs through a more intuitive and efficient interface, reducing setup time and improving reporting accuracy.

Note:

Object-based attributes already configured within Insights Dashboards will be added to this modal. In addition, the Configure button that previously appeared on the screen has been consolidated into a Context Menu.

For more information, see Using Object-Based Attribute Tables for Custom Insights Dashboards.

Create Sample Visualization for Attributes in the Attribute Configuration Modal

Specify the objects, sub-objects, and attributes that appear on each Insights Dashboard tab and instantly apply the visual configuration directly to the dashboard using the Attribute configuration modal. This enhancement simplifies dashboard setup and makes it easier to surface relevant attributes on dashboards via charts and slicers to improve data visibility.

For more information, see Using Object-Based Attribute Tables for Custom Insights Dashboards.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that caused inaccurate collection point data to appear on Cookie Consent Insights Dashboards.
Resolved an issue that prevented requests from appearing on Privacy Rights Automation column reports when sub-task filters were applied.
Resolved an issue that prevented Policy Management column reports from loading as expected when filters were applied.
Resolved an issue that prevented system attributes from being translated for Incident Management column reports.
Resolved an issue that caused exported finding reports to include duplicate records and deleted organizations.

Existing Public Preview Features

Insights Dashboards

Utilize highly customizable reporting and analytic capabilities using Insights Dashboards that are built through Power BI by Microsoft and embedded in the OneTrust Platform to analyze data captured across various products throughout the platform. The following seeded dashboards are available under Public Preview:

Expanded Custom Attributes for Privacy & GRC Insights Dashboards

Track additional metrics by adding up to 10 custom attributes to each tab on custom Insights Dashboards created using the Privacy and Governance, Risk, Compliance data sources. This enhancement provides more flexibility in customizing your Insights Dashboards, allowing you to visualize unique data points relevant to your organization’s business context.

For more information, see Using Object-Based Attribute Tables for Custom Insights Dashboards.

Insights Dashboard Updates

New columns have been added to the Measures folder for Cookie Details and Consent Details data tables. The following columns can be used to capture the signal opt-out rate:
- ATT Opt-out Percentage - The percent of opt-outs due to an ATT opt-out.
- ATT OptOut - The number of opt-out transactions due to the App Tracking Transparency opt-out signal.
- DNT Opt-out Percentage - The percent opt-outs due to an DNT opt-out.
- DNTOptOut - The number of opt-out transactions due to the Do Not Track opt-out signal.
- GPC Opt-out Percentage - The percent of opt-outs due to an GPC opt-out.
- GPCOptOut - The number of opt-out transactions due to the Global Privacy Control opt-out signal.
- Signal Opt-out Percentage - The percent of opt-outs due to a signal opt-out.
- signalOptOut - The number of opt-out transactions due to opt-out signals.

Things to Know

Audit Data Tables Removed from GRC Data Source: Tables related to audits, workpapers, and findings will be removed from the Governance, Risk, Compliance (GRC) data source. Dashboards with Audit Management data tables or audit visualizations using the GRC data source will no longer work once the update is complete.
Insights as Default for Net New Customers/Accounts: Starting in the OneTrust 202410.1.0 release, Insights Dashboards will be the default dashboard experience for all new OneTrust accounts/tenants. Users within new OneTrust accounts created after the respective environment is upgraded to 202410.1.0 will now see Insights Seeded Dashboards when available for a given module. Legacy dashboards will only appear for modules that do not currently have an Insights Seeded Dashboard. Existing accounts that already have access to Legacy Dashboards will not be affected by this change.
About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Global Data Manager - October 27, 2025 (Fall Release)

General Availability

Framework for OneTrust Ontology

Operate from a centralized source of truth for key regulatory, compliance, and data governance concepts. This glossary area includes definitions, attributes, and values for core objects used across the OneTrust platform.

For more information, see Global Reference Data Feature Guide.

Public Preview Features

Purpose Data Usage

For more information, see Unified Purpose Feature Guide.

Integrations - October 27, 2025 - 202510.2.0

General Availability

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Things to Know

: AES-256 is now a supported algorithm for Pretty Good Privacy (PGP) encryption credentials.
: Integration logs now support the Text view to allow copying of specific JSON text for use in troubleshooting.
About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Settings & Administration - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Email Observability Enhancements

Investigate and manage email delivery issues directly from the OneTrust Platform using the following self-service options that are now available on the Email activity tab of the Email settings screen in Global Settings:

The new Retry email and Retry all failed emails for event options allow you to automatically attempt delivery of previously failed emails, providing a built-in method for retrying failed emails.
The new Remove from bounce list option allows you to remove a user's email address from the bounce list, allowing the email notification to be successfully delivered to that email address.

These enhancements provide a centralized, intuitive interface where you can monitor, investigate, and act on email delivery issues, enabling self-service actions and enhancing troubleshooting efficiency.

For more information, see Monitoring Email Activity from the OneTrust Platform.

Bulk Edit Role Assignments & User Status

Manage users' statuses and assignments to roles, organizations, and user groups using the new bulk actions available on the Users screen in Global Settings. Check boxes now appear as the first column of the table on the Users screen, allowing you to select multiple users and complete various bulk actions. The following changes accompany this enhancement:

Bulk Update User Statuses: : You can now select multiple deactivated users and give them access to the platform by using the newActivatebulk action button. Conversely, you can select multiple activated users and revoke their access to the platform by using the newDeactivatebulk action button.
Bulk Update Role Assignments: : You can now select multiple users and update their assignments to roles, organizations, and user groups using the newEditbulk action button. The newAdd roles to usersandRemove roles from usersoptions allow you to specify which role and organization combinations should be added or removed from the selected users.
Users Screen Column Changes: : TheManaged by,Internal/External, andExpiration datecolumns have been removed from theUsersscreen. TheLicenses,Role, andStatuscolumns have been added to theUsersscreen.

This enhancement enables the bulk management of users directly from the Users screen and provides you with clearer visibility into users' roles, saving time and reducing complexity.

For more information, see Updating User Records in Bulk.

Table Enhancements for User Management

Various tables and table functionalities within Global Settings under User management have been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, persistent settings, and clearer row actions. Some tables may also include advanced features to support more complex workflows. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs.

For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Users V2 APIs

The following APIs are now available for use when managing users and their assignments to roles and organizations. These APIs enable you to efficiently retrieve, create, and update users and add or remove their assignments to roles and organizations, streamlining access control and improving administrative productivity.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that caused tasks to open in Edit mode instead of View mode when opening tasks via the task name link.

Existing Public Preview Features

SCIM Users and Groups Integrations

Utilize the Integrations module to configure triggers and actions for SCIM Users and Groups. This feature allows users to automate their organization's processes when managing user and group information using SCIM APIs.

For complete details on these workflow options, see Managing Custom Integration Workflows.

New Root Organization

Create a new root organization at the top of an existing organizational hierarchy using the new Set as the Root Organization check box on the Add Organization modal. This feature allows you to move an existing organizational structure, along with certain previously configured settings, under a new root organization.

For more information, see Managing Organizations.

Integrate Tasks with External Systems

Manage tasks created within the application across external systems by creating integration workflows using the following new integration events:

Task Add Attachment
Task Add Comment
Task Created
Task Deleted
Task Remove Attachment
Task Updated

This enhancement allows you to manage tasks across external systems, which may be helpful when addressing tasks that require a large volume of actions.

For more information, see Integrating Tasks with External Systems.

Things to Know

Confirmation Modal Enhancements

OneTrust has updated confirmation modals to enhance consistency, usability, and visual clarity across the platform. Enhancements include:

Icons are now appropriately scaled to keep the focus on modal content.
Content and padding have been adjusted to improve readability and visual balance.

Note:

While some screens already feature updated confirmation modals, not all enhancements are applied universally. These enhancements will continue to be updated throughout the platform across the next several releases.

A validation message now appears when creating or updating roles if the role name contains any restricted characters. Roles cannot be saved until all invalid characters are removed.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Privacy Automation

Data Mapping Automation - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Lightweight Worker Node Deployment

|Available with Solution Packaging Only

Deploy a modular version of our worker node that grants a simplified experience and minimizes the need for specialized personnel. It can retrieve all prerequisites and images from a cloud API, ensuring smooth, firewall-independent deployment. With the lightweight worker node, privacy teams can connect to diverse data sources to automatically discover, classify, and map data, enabling effortless data map population and record processing for improved governance and regulatory readiness. The following service providers are supported:

AWS
Azure
Google Cloud

For more information, see Lightweight Worker Node Deployment & Automation Guide.

Data Mapping Discovery Automation

|Available with Solution Packaging Only

Sync with external systems with secure credentials to seamlessly generate records in your data map without extensive, technical integration setup. This promotes easier monitoring of assets to maintain up-to-date inventories, which improves visibility and reduces manual configuration fatigue.

For more information, see Data Mapping Discovery Automation Overview.

Asset Detection Integrations

|Available with Solution Packaging Only

Sync with AWS, Azure, or Google Cloud with secure credentials to seamlessly generate records in your data map without extensive, technical integration setup. This promotes easier monitoring of assets to maintain up-to-date inventories, which improves visibility and reduces manual configuration fatigue.

For more information, see Data Mapping Discovery Automation Overview.

Data Element Detection Integrations

|Available with Solution Packaging Only

Connect to up to nine diverse data sources to automatically discover, classify, and map data, enabling effortless population of data maps and processing records for improved governance and regulatory readiness. Users simply connect their systems and the feature automatically identifies and classifies column and field names and provides data element and data categories.

For more information, see Automated Data Element Detection Feature Guide.

Support Native Vault for AWS, Azure, and GCP

Integrate with Azure Key Vault, AWS Secrets Manager, and Google Secret Manager to enable secure, compliant worker node deployments. This additional step in the lightweight worker node deployment empowers IT and Security teams with familiar tools and reduces onboarding time when setting up these installations.

For more information, see Lightweight Worker Node Deployment & Automation Guide.

Unified Purpose

For more information, see Unified Purpose Feature Guide.

@Mentions for Assets, Legal Entities, Processing Activities, and Vendors

Assets
Legal Entities
Processing Activities
Vendors

This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that prevented the Search function from populating with all relevant results when searching filtered inventory list screens for records with names containing special characters.
Resolved an issue that prevented some system attribute options from correctly displaying all translated values in column reports when the application language was changed.

New Public Preview Features

Purpose Data Usage

For more information, see Unified Purpose Feature Guide.

Existing Public Preview Features

Enhanced Data Graph Visualizations

View relationships between projects, data sets, and models in the data graph in addition to inventory records. This enhancement provides a clear visualization of how objects relate to each other and to inventory records throughout your data map.

For more information, see Creating and Managing Contextual Relationships.

Inventory Review

Gain essential visibility into the flow of newly added and updated inventory records so you can better investigate risks, promote compliance, and enhance efficiency concerning your data map. This review experience allows you to manage pending inventory records that are created by several methods and review inventory records with new or updated data elements.

For more information, see Inventory Review & Automation Feature Guide.

Important:

This feature was originally reported under General Availability for 202510.2.0. It has been rescheduled for General Availability in 202602.1.0 and will remain in Public Preview until that release.

Inventory Similarity Scan

Detect similar records in your data map for new records that have been added through various sources. Different than our duplicate asset functionality, the scan displays information about similar records within the new records to ensure users can easily find a record that is similar to the new entry.

For more information, see Inventory Similarity Scan.

Important:

This feature was originally reported under General Availability for 202510.2.0. It has been rescheduled for General Availability in 202602.1.0 and will remain in Public Preview until that release.

Permissions

Removed Permissions

Entity Inventory Report Export
Sync Inventory for Report
Create Data Lineage Inventory
View Data Lineage Inventory

The following permissions have been removed from the platform or removed from select system roles as defined below::

AI Governance Manager
Assessments Manager
Audit Manager
Auditor
Compliance Manager
Cookie Consultant
Cookie Manager
Data Access and Usage Manager
Data Governance Manager
Data Governance Viewer
Data Steward
Digital Policy Manager
Digital Policy Owner
Digital Policy Viewer
Disclosures Administrator
Employee
Enterprise Policy Manager
EPM Policy View Only
EPM Procedure View Only
EPM Standard View Only
EPM View Only
ERM Manager
ESG Manager
Ethics Policy Manager
Ethics Policy Owner
Ethics Policy Restricted Owner
Exchange Manager
Incident General User
Incidents Manager
Invited
IT Risk Approver
IT Risk Manager
Managed Service Provider
Maturity & Planning Manager
Policy Attestation Respondent
Policy Owner
Privacy Notice Author
Privacy Notice Manager
Privacy Program Auditor
Privacy Rights Automation Manager
Program Benchmarking Manager
Project Owner
Project Viewer
Tech Risk & Compliance Admin
Third-Party Viewer
TPDD Admin
TPDD Compliance Manager
TPDD Enhanced Due Diligence Requester
Vendor Manager
Vendorpedia Assessment Coordinator

Things to Know

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Incident Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that prevented email addresses from being pasted in incident register record comments.

New Public Preview Features

Incident Platform Workflow Enhancements

The Incident Workflows screen has been enhanced with search and sorting capabilities to help better organize and manage incident workflows. You can now search the Workflow screen by Workflow name, and sort the Workflow screen by the following columns:

Workflow Name
Default
Status
Date Modified
Date Created

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Assessment Automation - October 27, 2025 - 202510.2.0 (Fall Release)

Fixed

Resolved an issue that allowed some invited users to configure saved views on the Assessments list screen.
Resolved an issue that allowed some invited users to export assessment results via API.
Resolved an issue that prevented some assessment stage names from translating correctly when the application language was set to Turkish.
Resolved an issue that prevented assessment deadlines in assessment reminder emails from matching the deadlines configured in the application.
Further improvements have been made to prevent user activity from being recorded incorrectly in the Assessment activity modal when assessment names are automatically updated to correspond to changed template names. The modal now displays "OneTrust User" as the user responsible for these changes.

New Public Preview Features

AI Inventory Record Analysis

|Available with Solution Packaging Only

Pre-populate questions on newly created assessments with AI-generated responses using the new AI Inventory Record Analysis feature.

These responses are based on data from previous, directly related assessments and inventories. This feature streamlines DPIA completion by reducing the time respondents spend on completing assessments and transferring previously entered information from PIAs.

Note:

Support for Third Party Risk Management assessments is forthcoming in OneTrust 202511.1.0.

For more information, see Leveraging AI Inventory Record Analysis and AI Document Scanning to Complete Assessments.

Existing Public Preview Features

Launch Reassessments as Not Started

Configure reassessments to default to the Not Started stage upon launching. This enhancement applies to copied assessments, reassessments launched via automation rules, and reassessments launched via API.

Company Names in Email Notifications

Display your company name in assessment email notification templates using the __TenantName__ email variable when notifying users. This enhancement enables you to provide assessment notifications on behalf of your organization that reflect your tenant's name.

For more information, see Customizing Assessment Email Templates Using Dynamic Variables.

Accessibility Conformance

Screen readers now correctly announce assessment names when checkboxes on the Assessments list screen receive focus (WCAG-A: 1.3.1 Info and Relationships).

Things to Know

Additional HTML Sanitization has been implemented in assessments. This sanitization is to supplement the safeguards already in effect and ensure the continued protection of our customers. OneTrust recommends users paste content as plain text or use the options available within the rich text editor.

For more information on HTML sanitization, see the Open Worldwide Application Security Project's (OWASP) documentation.

Performance improvements have been made to ensure invited user roles function consistently when accessing and completing assessments.

Deleted users are now automatically removed from any assessments they were assigned to as anApproverorRespondent.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Privacy Rights Automation - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Trust Center for Privacy Requests

Add Privacy Requests sections to your Trust Center to allow data subjects to view and comment on their data subject requests. You can enable this feature alongside the Trust Center to centralize all privacy-related user experiences into a single, intuitive customer portal interface, enhancing platform efficiency and elevating the user experience.

For more information, see Getting Started with Trust Center and Adding a Privacy Requests Section.

AI Translation for Trust Center Comments

|Available with Solution Packaging Only

Click the Translate to button on comments left on privacy requests in the Trust Center to translate comments into the data subject's session language. This feature allows you to translate any comment on the Privacy requests section of the Trust Center not written in the data subject's session language to the appropriate language.

For more information, see Adding a Privacy Requests Section.

AI Translation for Request Comments

|Available with Solution Packaging Only

Click the Translate to button on the Request Details screen to translate comments into the current session language. This feature allows you to translate any comment on the Request Details screen not written in your current session language to the appropriate language.

For more information, see Adding Comments to Requests.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

US Multistate Web Form 1.4 Enhancements

The US Multistate web form has been updated to version 1.4 to reflect visibility rules and web form routing rules for the following states:

Tennessee
Minnesota
Maryland

Fixed

Resolved an issue that prevented visibility rules for the Submit button and attachments from importing successfully when exporting and re-importing web forms.
Resolved an issue that prevented some text alignment configurations on response templates from saving correctly.
Resolved an issue that prevented the date format in the Privacy Portal from displaying correctly when the portal language was set to Finnish (suomi).
Resolved an issue that prevented special characters from displaying correctly on the Review duplicate requests modal.

Things to Know

The following workflows are now available inPrivacy Rights Automation:

Tennessee Information Protection Act Right to Correction - 1.0
Tennessee Information Protection Act Appeals - 1.0
Tennessee Information Protection Act Right to Access - 1.0
Tennessee Information Protection Act Right to be Informed - 1.0
Tennessee Information Protection Act Right to Data Portability - 1.0
Tennessee Information Protection Act Right to Deletion - 1.0
Tennessee Information Protection Act Right to Opt Out - 1.0

Updated theComplete Subtask APIto include a character limit of 1.5 million on thecommentparameter. Comments added via API or directly in the application are now limited to 1.5 million characters.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Template Updates

OneVendor (Full) - 6.2

The privacy laws of Maryland and Rhode Island were added to the template.
Two new answer options were added to question 3.1: Applicable Privacy or Data Protection Law, which feature the following frameworks:
- Maryland Online Data Privacy Act [US-MD-MODPA]
- Rhode Island Data Transparency and Privacy Protection Act [US-RI-RIDTPPA]
Conditional logic within rule 1. Applicability Check [US-PADFA] was updated to account for the Maryland Online Data Privacy Act, Rhode Island Data Transparency and Privacy Protection Act, and any other missing US state privacy law.
Conditional logic was configured to reflect the introduction of the new jurisdictions to the template.
The Welcome text was edited to reflect the introduction of the new jurisdictions to the template.

OneVendor (Lite) - 6.2

The privacy laws of Maryland and Rhode Island were added to the template.
Two new answer options were added to question 2.3: Applicable Privacy or Data Protection Law, which feature the following frameworks:
- Maryland Online Data Privacy Act [US-MD-MODPA]
- Rhode Island Data Transparency and Privacy Protection Act [US-RI-RIDTPPA]
A new answer choice was added to question 3.3.
New answer choices were added to question 3.5 to account for the latest CCPA Regulations (2025).
Conditional logic within rule 1. Applicability Check [US-PADFA] was updated to account for the Maryland Online Data Privacy Act, Rhode Island Data Transparency and Privacy Protection Act, and any other missing US state privacy law
Conditional logic was configured to reflect the introduction of the new jurisdictions to the template.
The Welcome text was edited to reflect the introduction of the new jurisdictions to the template

Tech Risk and Compliance

Audit Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

@Mentions for Audits & Workpapers

Mention users directly within comments to draw their attention or request their input, triggering both an in-app notification and email notification. @Mention functionality is now supported in comments on audits and workpapers. This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Things to Know

Audit Data Tables Removed from GRC Data Source: Tables related to audits, workpapers, and findings will be removed from the Governance, Risk, Compliance (GRC) data source. Dashboards with Audit Management data tables or audit visualizations using the GRC data source will no longer work once the update is complete.
About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Compliance Automation - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Framework Content Updates

Apply system updates to your library controls, evidence tasks, and frameworks using the new Content update menu in Compliance Automation and IT Risk Management. This feature simplifies the update process by allowing you to adopt only the changes relevant to your organization, improving governance, increasing flexibility, and reducing overhead when managing framework content. These updates are based on recommendations from the GRC Labs Team and help your organization stay aligned with evolving frameworks.

For more information, see Managing Framework Updates.

AI Recommended Evidence Tasks

|Available with Solution Packaging Only

Enhance custom controls with intelligent, out-of-the-box evidence task suggestions powered by AI when creating and managing controls in the Controls Library. This feature allows you to review and add recommended evidence tasks directly to your custom controls to streamline the control mapping process by reducing manual effort, minimizing errors, and accelerating audit and assessment readiness. By leveraging AI, you will receive contextually relevant evidence tasks that align with your control objectives.

For more information, see AI-Powered Evidence Task Recommendations.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that prevented calendar months from resizing correctly when zooming out on the collection calendar.

New Public Preview Features

AI Evidence Analysis

|Available with Solution Packaging Only

Run AI-powered analysis for files uploaded on the evidence collection pane of the Evidence tasks screen when the Record recommendations setting is enabled in Global Settings. This feature allows you to evaluate how well files submitted during evidence collection align with defined controls and evidence requirements. The analysis will provide guidance that highlights validated content and flag gaps or incomplete information.

Important:

This feature is currently available for customers in the following environments: APP, APP-FR, APP-EU, APP-DE. AI Evidence Analysis will be available for all environments in a future release.

For more information, see Using AI for Evidence Analysis.

Evidence Task Review Workflow

Enable a default workflow for evidence task intervals when a reviewer is assigned. This enhancement introduces a structured set of stages to track the lifecycle of evidence, while also supporting notifications and task creation to keep teams informed and on track.

Note:

The Evidence Task Approval Bypass permission is required to allow evidence task assignees to bypass approval stages and send an evidence task interval to be collected.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Standard / Framework Changes

New EU Cyber Resilience Act Framework Added

The EU Cyber Resilience Act, adopted on July 11, 2024, and entering into force on January 20, 2025, introduces harmonized cybersecurity requirements for products with digital elements (PDEs) placed on the EU market. The regulation establishes obligations for manufacturers, importers, and distributors to ensure that products are designed, developed, and maintained with an appropriate level of cybersecurity throughout their entire lifecycle.

We’ve simplified implementation by making the EU Cyber Resilience Act Framework available on our platform—complete with policies, controls, implementation guidance, and evidence tasks tailored to meet the Act’s essential cybersecurity requirements. The framework helps organizations prepare for compliance ahead of the application date of January 20, 2027, when most obligations become enforceable.

Note:

The EU Cyber Resilience Act will be available on the OneTrust platform effective October 31, 2025.

For more information, see Supported Control Frameworks.

Permissions

The Hub Content Update, Content Update View, and Accept Content Update permissions have been added to give users the ability to view, accept, and update control framework content updates. This permission has been granted to the following system roles:
- Site Admins
- TRC Admins
- Compliance Managers
- IT Risk Managers

Enterprise Policy Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

@Mentions for Exceptions, Policies, Procedures, and Standards

Exceptions
Policies
Procedures
Standards

This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Activity Tracking in Exception Column Reports

Create activity-based column reports to extract activity information for the Exception Management data source and data type using the new Create Activity Report option. This enhancement allows you to extract audit logs in an Excel or CSV format, empowering you to report on activities across exceptions to understand how your key performance indicators and values have changed over time.

Note:

For more information, see Creating an Activity Report.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that prevented users from successfully reverting to a previous workflow stage after an existing stage has been deleted.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Issues Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Modify Issue API

The new Modify Issue API is now available for use to partially update the details of an existing issue. This API allows you to apply minor updates to the issue, streamlining the update process and eliminating the need to perform a complete issue update.

@Mentions for Issues

Mention users directly within comments to draw their attention or request their input, triggering both an in-app notification and email notification. @Mention functionality is now supported in comments on issues. This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Issues Intake via Assessments

Create assessment templates with an issue as the primary object, and use Assess Issue question types to intake issues via assessments in the Self Service Portal. This enhancement uses assessment templates that support risk and issue creation via the assessment when it is launched, and provides core teams an opportunity to formally conduct a review before the issue record is fully created.

For more information, see Issues Intake in the Self-Service Portal.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Existing Public Preview Features

Disable Editing of Details

Disable users from editing details on closed issues and preserve the record once the workflow is completed. This workflow configuration setting is optional during activation and is only available if the Close record setting is enabled. Users must reopen the issue record in order to edit a field.

For more information, see Managing Issue Workflows.

Risk to Issues Conversion

Convert risks to issues on the Risk Register by assigning the risk to an issues workflow and mapping existing risk attributes to the new record. This feature allows you to easily convert risks to issues when they fall outside your organization's risk criteria to help declutter your Risk Register and manage risks more effectively. You can revert conversions by restoring issues to risks on the new Converted risks screen.

For more information, see Converting Risks to Issues.

Things to Know

You can now add theIssue ID hyperlinkandIssue name hyperlinkas variables when configuring an issues workflow to send an email notification to a user. For more information, seeAdding Stage Rules to Issues Workflows.

When you configure an assessment rule to create an issue, issue creation no longer fails whenAssign Current Assessment's Approveris enabled and assigned to:

A user group
A user with the Can be issue approver permission

The issue will be created without an approver. This is a placeholder solution until the ability to provide user group support for issue owners and approvers is built.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

IT & Security Risk Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Seeded Risk Content

Access pre-seeded risk and business objective content for all available standards and frameworks on the Standards and Frameworks screen. This enhancement provides ready-to-use library content to enhance risk management capabilities by reducing implementation time and providing teams a head start when adopting new standards.

Note:

In the OneTrust 202509.1.0 release, pre-seeded risk category options have been added to support packaged risk and business objective content. For more information, see Adding Risk Categories.

For more information, see Supported Control Frameworks.

Filter Risk Library Content

Filter the Risk Library screen to quickly locate Risk Templates that match the defined criteria. This enhancement streamlines navigation and helps you efficiently find relevant risk content. Available filters include:

Category
Organization
Status
Standard / Framework

Formula Attribute Option Enhancements

Create formulas in the formula builder using the IF/THEN statement available for attribute options. This enhancement allows Risk Managers and Site Admins to easily configure automated risk score calculations using attribute options from single select or multi select attributes to simplify the formula setup and improve accuracy.

For more information, see Configuring Formulas using the Formula Attribute.

Insights IT & Security Risk Dashboard V2

An enhanced Insights Dashboard is now available for IT & Security Risk Management. The IT Security Risk Default V2 dashboard offers new visualizations, charts, and tabs, as well as an updated color palette, typography, and user flow. This new version provides you with an easier way to understand the current insights of your organization, helping you present critical data points to key stakeholders with confidence.

Note:

The IT Risk Management Insights Dashboard will remain available in the platform at this time, but it will be removed in a future release.

For more information, see Insights IT Security Risk Default V2 Dashboard.

@Mentions for Control Implementations, Issues, Objectives, and Risks

Control Implementations
Issues
Objectives
Risks

This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that prevented control profiles from generating custom controls when conditions were triggered.
Resolved an issue that prevented users from changing risk workflow stages when the workflow had four stages or less.

New Public Preview Features

AI Evidence Analysis

|Available with Solution Packaging Only

Important:

This feature is currently available for customers in the following environments: APP, APP-FR, APP-EU, APP-DE. AI Evidence Analysis will be available for all environments in a future release.

For more information, see Using AI for Evidence Analysis.

Nested Table and Tree View for Risk Hierarchy

Identify, assess, and monitor risks across your organization with the redesigned Risk hierarchy list screen. This enhancement replaces the previous Risk Hierarchy Explorer and provides a more intuitive, visually appealing interface by using nested table and tree views to help you clearly visualize and manage parent-child risk relationships.

For more information, see Creating Risk Hierarchies.

Handling Blank Values in Formula Attributes

Enable the Assign Null (no value) to blank values in formulas setting in Global Settings to ensure blank values are treated as NULL (no value) instead of being assigned a value of zero in formulas. This setting determines how blank inputs are interpreted in the formula builder across the OneTrust Platform, specifically for score-formula and formula-type attributes.

Note:

For existing formula attributes, changes will take effect when the attribute is rescored.

For more information, see Configuring Formulas using the Formula Attribute.

Export Risks and Business Objectives to PDF

Generate PDF reports for individual or multiple risk and business objective records directly from their respective list screens. This enhancement streamlines reporting and improves visibility into key risk and objective data, helping to manage records more effectively.

For more information, see Creating and Managing Risks and Creating and Managing Business Objectives.

Existing Public Preview Features

Shared Control Implementations on Risks

Create shared control implementations with multiple risks or a single control implementation for each risk from the Control Library and Inventory Details screens. You can also merge multiple implementations of the same library control into a single control or split a single implementation into several controls. This feature allows you to reduce the sprawl of control implementations created within your organization by removing redundant controls.

Key capabilities include:

Inventory Flexibility: Choose which inventories align to risk controls to provide greater flexibility when creating and updating risks.
Relationship Management: Add risks to existing control implementations or associate additional controls directly to risks.
Merge & Split Controls: Merge multiple implementations of the same library control sourced from a risk or split a shared control into single implementations for each risk.

For more information, see Managing Control Implementations and Managing Risks in the Risk Register.

Risk to Issues Conversion

Convert risks to issues on the Risk Register by assigning the risk to an issues workflow and mapping existing risk attributes to the new record. This feature allows you to easily convert risks to issues when they fall outside your organization’s risk criteria to help declutter your Risk Register and manage risks more effectively. You can revert conversions by restoring issues to risks on the new Converted risks screen.

For more information, see Converting Risks to Issues.

Standard / Framework Changes

New EU Cyber Resilience Act Framework Added

Note:

The EU Cyber Resilience Act will be available on the OneTrust platform effective October 31, 2025.

For more information, see Supported Control Frameworks.

Things to Know

The following system attributes can now be deactivated in theAttribute manager:

Children Risks
Hierarchy Level
Orphan
Parent

TheID (GUID)column is now included in the related object list of evidence task column reports. You can no longer retrieve GUIDs by exporting the Control library.

TheID (GUID)column is now included in the related objects list of control implementation column reports.

The description for theEnable automated control inheritancesetting inGlobal Settingshas been updated to clarify its impact when enabled. The description now includes details on how it affects the risk import template, control implementations import template, and assessment rules.

For more information, see Risk, Controls & Evidence Settings.

Microsoft Word and Excel files uploaded during evidence collection will now be added to the Web Application Open Platform Interface (WOPI) service to render evidence previews.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Permissions

TheManage control categoriespermission has been split into theView category manager for controls, threats and vulnerabilities,Add categories in category manager for controls, threats and vulnerabilities, andEdit categories in category manager for controls, threats and vulnerabilitiespermissions.

TheAdd control implementationandBulk create control implementationspermissions have been removed from the Project owner role.

New Permissions

AI Governance manager
Assessments manager
Audit manager
Compliance manager
Data Governance manager
Data Mapping Automation manager
ERM manager
ESG manager
Enterprise policy manager
Exchange manager
IT risk manager
Incidents manager
Maturity & Planning Manager
Policy owner
Privacy notice author
Privacy notice manager
Privacy officer
Program Benchmarking manager
Site admin
Tech Risk & Compliance Admin
Vendor manager

The following permissions have been added to the platform and have been granted to system and custom roles as defined below:

Controls library edit control
Add evidence tasks
Edit evidence task library

QRA & Vendor Portal - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Third-Party Management

Third-Party Due Diligence - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

Resolved an issue that prevented data in the Adverse Media tab from properly displaying in third-party records.

Things to Know

: When a screening record returns aNo Matchresult, theMonitoring alertscolumn inScreening Resultsnow displays a null value.
About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Third-Party Risk Exchange - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Permissions

The VP Exchange actions permission has been removed.

Third-Party Risk Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

DORA Regulatory Updates

|Available with Solution Packaging Only

New data validation has been implemented in Third-Party Risk Management to ensure key attribute fields that require unique identifiers to produce a DORA report do not contain duplicate entries across records at the time of creation or modification of the record. For more information, see DORA Report Validation Reference.

Third-Party Risk Management - Engagement PDFs

Create custom engagement PDF reports in Reports. This enhancement allows you to create PDF reports with engagements as the primary data type to provide comprehensive insight into your organization’s engagement activity and related engagement objects. For more information, see About Engagement Column and PDF Reports.

@Mentions for Contracts & Engagements

Mention users directly within comments to draw their attention or request their input, triggering both an in-app notification and email notification. @Mention functionality is now supported in comments on contracts and engagements. This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Unified Purpose

For more information, see Unified Purpose Feature Guide.

Screen Header Enhancements

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.
Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.
Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

For more information, see Screen Header Enhancements Across the OneTrust Platform.

New Public Preview Features

Purpose Data Usage

For more information, see Unified Purpose Feature Guide.

Things to Know

About Known Defects: Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Permissions

Split Permissions