Cookie Consent - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Two-Step Confirmation Modal for CMP

Configure your CMP to display a two-step confirmation modal when a user’s consent would conflict with a previous opt-out. This enhancement is designed to inform users more explicitly of potential conflicts in their consent configurations.

For more information, see Customizing the Banner Template and Customizing the Preference Center Template

Configure Purposes by Organization

View and configure purposes by organization on the redesigned Purposes screen. This enhancement improves access to and visibility of purposes based on your organizational hierarchy. Users are now limited to the purposes available to their organizational level when configuring the CMP.

For more information, see Managing and Categorizing Cookies and SDKs.

Enhanced Support for Opt-Out Preference Signal (OOPS)

Capture the source of user opt-outs when users opt out manually or via browser signals, such as Global Privacy Control (GPC) and Do Not Track (DNT). This enhancement allows you to differentiate between manual and signal-based opt-outs in consent logs. This enhancement also prevents users from disabling the Opt-Out Signal Notification setting on CPRA and CCPA (legacy) templates.

For more information, see. Leveraging the Global Privacy Control (GPC) Signal.

Insights Reporting for A/B Testing Exports

View Insights analytics for A/B tests when exporting results from the Report tab of the Test details screen. This enhancement allows you to view enhanced reporting and analytics on Testing center exports.

For more information, see Configuring A/B Testing.

Compliance Assistant

|Available with Solution Packaging Only

Evaluate your CMP implementation for compliance with various legal frameworks using the Compliance assistant interface. This feature enables you to view potential risks for noncompliance across your domains and provides suggestions to improve your configurations.

Note:

Free trials of the Compliance Assistant feature will end with the 202512.1.0 release.

For more information, see Leveraging CMP Compliance Assistant.

Screen Header Enhancements

 

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

• Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.

• Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.

• Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

While some screens already feature updated headers, not all enhancements are applied universally and may vary depending on the screen's functionality and context. Enhancements to additional screens may also become visible across the next several releases.

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

• Resolved an issue that prevented Vendor List Link text from displaying in full on IAB TCF preference centers accessed via mobile browsers.

• Resolved an issue that prevented the Selector value field on the Authentication tab of the Website details screen from saving values consistently when configuring settings for behind-authentication scans.

New Public Preview Features

Get List of Bulk Export Download Details API

Added the new Get List of Bulk Export Download Details API to the Bulk Export APIs to retrieve the download details for a bulk export with paginated results. This API allows you to pass the continuationToken and size parameters, optimizing response times and mitigating any possible timeout errors.

Existing Public Preview Features

Enhanced Auto-Blocking Interface

Leverage an improved Auto-Blocking experience, featuring a redesigned safe list, block list, and match list. The enhanced Auto-Block tab is designed for a quicker and easier user experience when reviewing and blocking URLs.

For more information, see OneTrust Cookie Auto-Blocking (Enhanced Interface).

Banner SEO Configuration

Deploy your banner script with header (<h>) tags replaced as paragraph (<p>) tags for improved search engine optimization.

For more information, see Publishing and Implementing Cookie Consent Scripts, or contact OneTrust Support or your account representative.

Support for Multi-Language Privacy Policy Links

Configure privacy policy links in multiple languages on the Dynamic Links section of the Website Details screen. This feature enables you to offer privacy policy links and information in each language relevant to your business needs.

For more information, see Configuring Domain Branding.

Enhanced State Support for the Global Privacy Platform

The Global Privacy Platform (GPP) settings now support consent strings for the following US states:

• Delaware

• Iowa

• Nebraska

• New Hampshire

• New Jersey

• Tennessee

For more information, see Configuring Global Privacy Platform Settings.

Bulk Export APIs

The following APIs are now available for use to create and cancel bulk exports and retrieve their status, progress, download details, and credit details. These APIs enable users to extract large volumes of cookie receipts at once with a limit of six bulk exports per month.

• Create Bulk Export API

• Get List of Bulk Exports API

• Get Bulk Export Status API

• Cancel Bulk Export API

• Get Bulk Export Download Details API

• Get Bulk Export Credit Details API

Authenticated Consent for New and Existing Users

Transfer consent from local storage to new and existing data subject IDs (DSIDs) for user profiles when leveraging Cross-Device Consent. This enhancement allows you to apply previously captured consent to user profiles to streamline consent collection.

Always Inactive Consent State

Leverage the new Always Inactive consent state to allow users to display tracking technologies that are present but not enabled on their websites. This consent state enables you to notify your end users that a tracking technology is deployed but not active.

For more information, see Cookie Consent Models and Configuring Geolocation Rules.

Enable Global Privacy Platform on TCF 2.2 Templates

Enable the Global Privacy Platform setting on TCF 2.2 templates. This setting allows you to enable the IAB Tech Lab - Global Privacy Platform (GPP) and populate the IAB TCF EU section of the GPP string.

For more information, see Configuring the Global Privacy Platform Settings.

Vendor Identification, Categorization, and Consent

Vendor Identification, Categorization, and Consent enables you to categorize any vendor services on your website and provide detailed consent options to your visitors. This feature streamlines vendor disclosure and consent by detecting known services and linking them to tracking technologies. Leverage Vendor Service Identification, Categorization, and Consent to perform the following actions:

• Identify known vendor services when scanning your websites.

• Categorize the vendor services active on your websites.

• Link tracking technologies to identified vendor services.

• Allow end users to configure consent for vendor services on the Preference Center.

• Capture records of consent at the vendor service level.

• Configure IAB templates to capture and disclose vendor service information.

• View source URLs for tag initiators on the Initiators tab of the Scan Results screen.

For more information, see Vendor Identification, Categorization, and Consent Feature Guide.

Legitimate Interest Configuration for Reject All on IAB Templates

Implement a Reject All button on your Preference Center and Cookie Banner that prevents objection to legitimate interest. This enhancement improves compatibility with Google Limited Ads.

For more information, see Customizing the Preference Center Template.

Server-Side Rendering

Server-side rendering is now available for Cookie Banner HTML and CSS.

For more information, see Server-Side Rendering: Performance and Availability.

Accessibility Conformance

• Image elements (<img>) no longer leverage role=image and are identified as images by assistive technology (WCAG-A: 4.1.2 Name, Role, Value).

• When accessing the Preference Center using the Firefox browser, keyboard focus now automatically moves to the first interactive control (e.g., button, input, link) within the dialog (WCAG-A: 1.3.1 Info and Relationships).

Things to Know

Web Button Customizations

As a result of thefeature (Define the Order of Buttons on the CMP) that became generally available in 202508.1.0, users may notice some changes in the HTML and CSS of their CMP.

For more information, see CMP Expanded Release Notes.

When leveraging Cross-Domain and Cross-Device Consent for the web CMP, you can now enable thePreserve consent for logged out userssetting to prevent the banner from resurfacing for logged out users.

When publishing scripts, users can now prevent cookies created specifically for a top level site domain from being shared with other top level domains using the same iFrame by enabling theSeparate cookies by domainsetting on thePublishmodal

Note:

This setting is only available when the Enable SameSite + None setting is enabled for a script.

For more information, see Publishing and Implementing Cookie Consent Scripts.

When publishing scripts, users can now enable theRefresh page upon interactionsetting to allow the web page and consent banner to refresh automatically after users configure their consent preferences.

For more information, see Publishing and Implementing Cookie Consent Scripts.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.