Cookie Consent - August 7, 2026 - 202608.1.0 (Summer Release)

General Availability

Enhanced Tracking Technologies Interface

Leverage the new Tracking technologies interface to log, categorize, and report on tracking technologies found on your websites or SDKs. This feature improves the existing Tracking technologies interface and enhances insight into your websites' or apps' tracking technologies by linking them to known vendors and hosts.

For more information, see Managing Tracking Technologies. This feature is related to the following ideas: CONTENT-I-81, PDGI-I-1592, CSC-I-9, PDGI-I-1739, OT-I-14035.

Note:

This feature was previously available as Vendor Identification, Categorization, and Consent.

CMP Governance through Ownership & Notifications

Automatically define default owners for your websites and tracking technologies when configuring scans. This enhancement enables you to configure users within OneTrust who are responsible for managing changes to tracking technology details and the CMP configuration on specific websites and are notified of these updates.

For more information, see Scanning a Website and Managing Tracking Technologies. This feature is related to the following ideas: CONTENT-I-320, OT-I-6353, PDGI-I-899, PDGI-I-1505, CSC-I-125.

Website Scan Observability

Access the new scanner Job queue to review scan statuses and start times for each of your scanned domains. This feature provides a higher degree of insight into each of your scans, enabling you to more easily monitor scan progress and diagnose failures.

For more information, see Scanning a Website. This feature is related to the following ideas: OT-I-514, OT-I-4946, OT-I-12712, OT-I-15978, PDGI-I-595.

Enhancements to the Publish Script to Website API

Updated the Publish Script to Website API with the following enhancements:

  • Added the scriptVersion request parameter to specify the SDK version to publish to.

  • Added the regionRules request parameter to specify individual geolocation rules that require reconsent.

  • Added the gaTrackingEnabled and gaAssignCategory request parameters to configure Google Analytics event tracking behavior and category assignment.

  • Added the commonTrackers request parameter to specify hosts that should be automatically blocked when common tracker auto-blocking is enabled.

  • Added the sameSiteNone and separateCookieByDomain request parameters to configure cookie behavior for cross-site and partitioned cookie scenarios.

  • Added the supportSPA request parameter to support banner reloading for single-page application (SPA) experiences.

  • Added the supportCSP request parameter to support Content Security Policy (CSP) configurations that require the use of nonces for inline styles.

  • Added the autoRefreshEnabled request parameter to automatically refresh the web page and consent banner after a user submits a consent choice.

This feature is related to the following idea: OT-I-13234.

addendum: This release note was added on August 21, 2026.

Fixed

  • Resolved an issue that caused a console error and prevented annotation styling from applying correctly in Apryse WebViewer when a Content Security Policy (CSP) was enabled.

New Public Preview Features

Global Opt-Out Flow

|Available with Solution Packaging Only

Enable end users to opt out of a purpose across all of their linked devices, services, and accounts at once using the Global opt-out settings in your preference center template. This feature enables your end users to opt out of a purpose from every known identifier associated with their account and automatically submits a DSR request to process their opt-out from the specified purpose or purpose group. This enhancement is designed to improve your compliance with California privacy law.

For more information, see Customizing the Preference Center Template. This feature is related to the following ideas: OT-I-9627.

New CMP Experience

Enable the New CMP Experience setting to leverage the redesigned Cookie Consent interface. This new interface streamlines multiple interfaces within Cookie Consent to create a unified experience that improves navigation and makes it easier to deploy and manage your CMP.

For more information, see Enabling the New CMP Experience.

addendum: This release note was added on August 14, 2026.

Existing Public Preview Features

Email Completion Notifications for Compliance Assistant

|Available with Solution Packaging Only

Receive email notifications for completed Compliance Assistant scans. This enhancement notifies compliance assistant scan owners via email that the scan has completed.

For more information, see Leveraging CMP Compliance Assistant.

Enhanced Auto-Blocking Interface

Leverage an improved Auto-Blocking experience, featuring a redesigned safe list, block list, and match list. The enhanced Auto-Block tab is designed for a quicker and easier user experience when reviewing and blocking URLs.

For more information, see OneTrust Cookie Auto-Blocking (Enhanced Interface).

Banner SEO Configuration

Deploy your banner script with header (<h>) tags replaced as paragraph (<p>) tags for improved search engine optimization.

For more information, see Publishing and Implementing Cookie Consent Scripts, or contact OneTrust Support or your account representative.

Support for Multi-Language Privacy Policy Links

Configure privacy policy links in multiple languages on the Dynamic Links section of the Website Details screen. This feature enables you to offer privacy policy links and information in each language relevant to your business needs.

For more information, see Configuring Domain Branding.

Enhanced State Support for the Global Privacy Platform

The Global Privacy Platform (GPP) settings now support consent strings for the following US states:

  • Delaware

  • Iowa

  • Nebraska

  • New Hampshire

  • New Jersey

  • Tennessee

For more information, see Configuring Global Privacy Platform Settings.

Authenticated Consent for New and Existing Users

Transfer consent from local storage to new and existing data subject IDs (DSIDs) for user profiles when leveraging Cross-Device Consent. This enhancement allows you to apply previously captured consent to user profiles to streamline consent collection.

Always Inactive Consent State

Leverage the new Always Inactive consent state to allow users to display tracking technologies that are present but not enabled on their websites. This consent state enables you to notify your end users that a tracking technology is deployed but not active.

For more information, see Cookie Consent Models and Configuring Geolocation Rules.

Enable Global Privacy Platform on TCF 2.2 Templates

Enable the Global Privacy Platform setting on TCF 2.2 templates. This setting allows you to enable the IAB Tech Lab - Global Privacy Platform (GPP) and populate the IAB TCF EU section of the GPP string.

For more information, see Configuring the Global Privacy Platform Settings.

Legitimate Interest Configuration for Reject All on IAB Templates

Implement a Reject All button on your Preference Center and Cookie Banner that prevents objection to legitimate interest. This enhancement improves compatibility with Google Limited Ads.

For more information, see Customizing the Preference Center Template.

Server-Side Rendering

Server-side rendering is now available for Cookie Banner HTML and CSS.

For more information, see Server-Side Rendering: Performance and Availability.

Accessibility Conformance

  • Users can no longer dismiss the banner using the Esc key if the Require banner interaction setting is enabled on the template (WCAG-A 1.3.1 Info and Relationships).

  • The banner no longer incorrectly receives focus by default upon page load when the Banner focus setting is disabled on a template (WCAG-A: 4.1.2 Name, Role, Value).

Permissions

Things to Know

APartially completedscan status now displays on theWebsiteslist screen andScan detailsscreen when a login failure occurs during a scan.

TheTagstab on theTracking technologiesscreen is now only available upon request.

Local and session storage is now removed from the user's browser for specific purposes when users opt out of a specific purpose and is removed for all purposes when users selectReject allon the CMP.

TheActive usersdashboard has been updated with clearer language to improve how usage metrics are reported.

addendum: This release note was added on September 4, 2026.

ThePublishpane on theScriptsscreen now includes theShow CCPA out-out iconsetting, which allows you to display a CCPA-specific opt-out icon when deploying scripts with CCPA or CPRA templates.

addendum: This release note was added on September 4, 2026.
About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.