Cookie Consent - October 16, 2026 - 202610.1.0

Fixed

  • Resolved an issue that caused an incorrect vendor count to display on IAB Transparency and Consent Framework EU preference centers when grouping IAB purposes.

  • Resolved an issue that caused consent toggles to display with incorrect alignment in the preference center when using an IAB Transparency and Consent Framework EU template configured with a Tab layout.

  • Resolved an issue that caused excessive white space to display on preference centers configured with a Center or Panel layout after end users zoomed out in their browser window.

  • Resolved an issue that prevented bulk imported cookies from populating on the Tracking technologies screen if the cookies were already present for another domain.

  • Resolved an issue that caused intermittent errors when initiating website scans for websites with URLs ending with a trailing slash (/).

New Public Preview Features

Telemetry.js for Real-World Tracker Detection |Available with Solution Packaging Only

Integrate Telemetry.js with the OneTrust CMP to enable continuous runtime monitoring to help identify tracking technologies that execute during real user sessions. Telemetry.js enhances web scanning by observing tracking technologies as they run on your site. This helps provide a more complete view of technologies that may not appear during a scheduled scan, such as technologies triggered after page load, during navigation, or after a user interaction.

For more information, see Third-Party Risk Management - October 16, 2026 - 202610.1.0.

Existing Public Preview Features

New CMP Experience

Enable the New CMP Experience setting to leverage the redesigned Cookie Consent interface. This new interface streamlines multiple interfaces within Cookie Consent to create a unified experience that improves navigation and makes it easier to deploy and manage your CMP.

Note:

You can enable this preview feature using an in-app setting within Global Settings

For more information, see Enabling the New CMP Experience.

Global Opt-Out Flow |Available with Solution Packaging Only

Enable end users to opt out of a purpose across all of their linked devices, services, and accounts at once using the Global opt-out settings in your preference center template. This feature enables your end users to opt out of a purpose associated with their account and automatically submits a DSR request to process their opt-out from the specified purpose or purpose group. This enhancement is designed to improve your compliance with California privacy law.

For more information, see Customizing the Preference Center Template. This feature is related to the following ideas: OT-I-9627.

Email Completion Notifications for Compliance Assistant |Available with Solution Packaging Only

Receive email notifications for completed Compliance Assistant scans. This enhancement notifies compliance assistant scan owners via email that the scan has completed.

For more information, see Leveraging CMP Compliance Assistant.

Enhanced Auto-Blocking Interface

Leverage an improved Auto-Blocking experience, featuring a redesigned safe list, block list, and match list. The enhanced Auto-Block tab is designed for a quicker and easier user experience when reviewing and blocking URLs.

For more information, see OneTrust Cookie Auto-Blocking (Enhanced Interface).

Banner SEO Configuration

Deploy your banner script with header (<h>) tags replaced as paragraph (<p>) tags for improved search engine optimization.

For more information, see Publishing and Implementing Cookie Consent Scripts, or contact OneTrust Support or your account representative.

Support for Multi-Language Privacy Policy Links

Configure privacy policy links in multiple languages on the Dynamic Links section of the Website Details screen. This feature enables you to offer privacy policy links and information in each language relevant to your business needs.

For more information, see Configuring Domain Branding.

Enhanced State Support for the Global Privacy Platform

The Global Privacy Platform (GPP) settings now support consent strings for the following US states:

  • Delaware

  • Iowa

  • Nebraska

  • New Hampshire

  • New Jersey

  • Tennessee

For more information, see Configuring Global Privacy Platform Settings.

Authenticated Consent for New and Existing Users

Transfer consent from local storage to new and existing data subject IDs (DSIDs) for user profiles when leveraging Cross-Device Consent. This enhancement allows you to apply previously captured consent to user profiles to streamline consent collection.

Always Inactive Consent State

Leverage the new Always Inactive consent state to allow users to display tracking technologies that are present but not enabled on their websites. This consent state enables you to notify your end users that a tracking technology is deployed but not active.

For more information, see Cookie Consent Models and Configuring Geolocation Rules.

Enable Global Privacy Platform on TCF 2.4 Templates

Enable the Global Privacy Platform setting on TCF 2.4 templates. This setting allows you to enable the IAB Tech Lab - Global Privacy Platform (GPP) and populate the IAB TCF EU section of the GPP string.

For more information, see Configuring the Global Privacy Platform Settings.

Legitimate Interest Configuration for Reject All on IAB Templates

Implement a Reject All button on your Preference Center and Cookie Banner that prevents objection to legitimate interest. This enhancement improves compatibility with Google Limited Ads.

For more information, see Customizing the Preference Center Template.

Server-Side Rendering

Server-side rendering is now available for Cookie Banner HTML and CSS.

For more information, see Server-Side Rendering: Performance and Availability.

Permissions

  • You can now bulk update purpose assignments and override inherited global settings for multiple tracking technologies at once, reducing manual maintenance for large inventories while maintaining governance via the Edit tracking technologies permission.

Accessibility Conformance

  • Screen readers no longer announce the Notice Description multiple times when its value matches the Cookie banner screen reader value (dialog) (WCAG‑A 4.1.2: Name, Role, Value).

  • External link icons now display immediately on all applicable links when the cookie banner loads (WCAG-A 1.4.1: Use of Color).

Things to Know

  • Consent receipts now always include the source, consent model, and interaction type for all known and unknown users, regardless of Advanced Analytics settings.

  • A Select all checkbox is now available on the Instances tab of the Global settings pane when deleting multiple instances of tracking technologies.

  • Users can now edit and reassign existing tracking technology instances to one or more websites directly from the Global settings pane on the Technology details screen.

  • The Host field for tracking technologies is now a free-text field that allows users to assign technologies to first-party or custom hosts.

  • You can now bulk update purpose assignments and override inherited global settings for multiple tracking technologies simultaneously.

  • The Default description column is now available on the Tracking technologies screen, allowing you to review global descriptions for cookies and SDKs directly from the list view.

  • A deprecation warning now displays in the application when the Choices banner or No banner layouts are selected for a template.

  • About Known Defects

    Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.