Mobile & OTT/CTV App Consent - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Mobile iOS and Android SDK WCAG Compliance

Accessibility enhancements to iOS and Android SDK user interfaces have been introduced to comply with WCAG 2.2 AA standards and the European Accessibility Act. This update allows you to deliver a more accessible experience to a wider audience when integrating your mobile SDKs.

For more information, see OneTrust Mobile App Consent VPAT Report.

Screen Header Enhancements

 

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

  • Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.

  • Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.

  • Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

While some screens already feature updated headers, not all enhancements are applied universally and may vary depending on the screen's functionality and context. Enhancements to additional screens may also become visible across the next several releases.

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed Admin

  • Resolved an issue that prevented the Mobile App Scan integration workflow from triggering correctly when using some built-in webhook trigger actions. Success status logs are now registered and error access messages are no longer returned.

Fixed Android

  • Resolved an issue where scanning .apk files failed resulting in a scan error. The UTF8-encoded string length has been corrected to enable support for strings exceeding 0x80 characters.

  • Resolved an issue where the getConsentStatusForSDKId method returned incorrect values starting with the OneTrust 202507.1.0 release.

Fixed iOS

  • Resolved an issue where an Always Active group or SDK consent was incorrectly returned as 0 when a user performed a Reject All save action and immediately queried for consent before the consent logging process completed. An incorrect status is no longer reflected in the SDK broadcast after interaction saving.

  • Resolved an issue that caused the banner to display before and after the App Tracking Transparency (ATT) prompt when startSDK was called for the first time on the React Native SDK.

Existing Public Preview Features

Consent Management Platform APIs

The following APIs are now available for use with retrieving interface attributes needed to display the Banner and Preference Center, retrieving a list of active IAB and Google Vendors to display on the Preference Center, and logging consent when an end user interacts with a Banner or Preference Center. These APIs enable you to easily access data for Banner and Preference Center implementations, disclose vendor information to end users, and capture end user consent.

Roku Support for Unified Consent Profile for Known Users

Leverage the new Unified Consent Profile for Known Users functionality to connect data subjects' CMP preferences with Universal Consent & Preference Management profiles by enabling the Create data subject profiles for known users setting on the Geolocation Rules tab. You can also easily trigger integration workflows to send CMP preferences to downstream systems, and efficiently manage your preferences in a unique Preference Center, centralizing all of them in one single profile.

This enhancement provides a comprehensive view of data subjects empowering you with more control over the data captured across both modules, resulting in a more streamlined and tailored user experience.

For more information, see Connecting CMP preferences with Universal Consent & Preference Management Profiles.

Configure Button Layout for the Banner

Configure the positioning of buttons on your mobile and CTV banners within the Button Sets section of the Template Details screen. This enhancement allows you to specify the positioning of buttons on your banners for a more customized experience.

  • iOS

  • Android

For more information, see Customizing the Mobile App Consent Banner Template and Customizing the Mobile App Consent Preference Center Template.

Enhanced Branding Settings for Mobile and CTV SDKs

Configure detailed branding settings for your mobile SDKs on the Branding tab of the Mobile App Details and CTV App Details screen, respectively. This enhancement enables you to configure more specific branding settings for each of your mobile and CTV applications.

For more information, see Configuring Mobile and CTV App Branding.

Validation for Cross-Device Consent Receipts

Enable the Require Authentication for known users setting when leveraging Cross-Device Consent to require validation on your consent receipts. This enhancement allows you to more reliably collect consent from known users.

For more information, see Configuring Geolocation Rules.

Note:

This enhancement is only available to users with the Consent Rate Optimization (CRO) add-on package. Contact OneTrust Support or your account representative to enable this functionality.

To learn more, see Maximize Opt-Ins with Consent Rate Optimization.

Authenticated Consent for New and Existing Users

Transfer consent from local storage to new and existing data subject IDs (DSIDs) for user profiles when leveraging Cross-Device Consent. This enhancement allows you to apply previously captured consent to user profiles to streamline consent collection.

This feature is available for the following platforms:

  • iOS

  • Android

  • Apple TV

  • Android TV

Enable Global Privacy Protocol on TCF 2.2 Templates

Enable the Global Privacy Protocol setting on TCF 2.2 templates. This setting allows you to enable the IAB Tech Lab - Global Privacy Protocol (GPP) and populate the IAB TCF EU section of the GPP string.

This feature is available for the following platforms:

  • Android

  • Android TV

  • Apple TV

  • HTML5

  • iOS

  • Roku

  • Unity

  • Xamarin

For more information, see Configuring the Global Privacy Protocol Settings.

New Reject All Button Configuration

Enable the updated Reject All button configuration on the Preference Center template. This new configuration ensures that legitimate interest is not impacted for customers using Google Ads.

For more information, see Customizing the Mobile App Consent Preference Center Template.

Things to Know

  • The following changes have been made to the Consent Management Platform (CMP) APIs:

    • Updated the Get Banner Data, Get Preference Center Data, and Log Consent APIs to add the IABTCF_VendorsDisclosed and IABGPP_TCFEU2_VendorsDisclosed parameters within the storageKeys object of the response. This enhancement ensures compliance with the latest IAB TCF v2.3 specification.

  • The new Mobile SDKs powered by the CMP API now return the latest consent given when changing regions, ensuring consistent platform behavior aligned with the Web CMP experience.

  • Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.

Tip:

For more information on Consent Management Platform (CMP) release notes, click here.