Universal Consent & Preference Management - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Introducing the Trust Center Portal

Leverage the new Trust Center to deliver a consistent, branded experience across your organization, while simplifying the process for managing user settings and choices. Trust Center allows you to centralize all privacy-related user experiences into a single, intuitive customer portal interface, enhancing platform efficiency and elevating the user experience.

Trust Center key features include:

Unified portal

Designed as a platform app, it brings together all consent preferences and privacy requests into a single interface. As a platform component, the Trust Center will over time replace UCPM preference centers and DSAR portal implementations.

Fast deployment

Set up your portal in a few clicks and customize the look and feel quickly with intuitive controls.

Easy to align with your brand identity

Ensure full alignment with your organization’s visual and brand guidelines applying and rearranging your layouts to customize your portal adapted to your branding.

Accessible and localizable

Trust Center has been built for global audiences with full localization language support, responsive layouts, and accessibility best practices.

For more information, see Getting Started with Trust Center, Creating a Trust Center, and Suggested Trust Center Setups.

Screen Header Enhancements

 

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

  • Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.

  • Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.

  • Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

While some screens already feature updated headers, not all enhancements are applied universally and may vary depending on the screen's functionality and context. Enhancements to additional screens may also become visible across the next several releases.

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Snowflake Native App Improvements

The OneTrust Consent Management native app in Snowflake now provides you with purpose status and purpose version to define data masking policies, allowing you to connect consent data and leverage multiple consent statuses for a more detailed consent selection. In addition, data subject identifier type is available as a profile attribute for data subjects. These enhancements increase efficiency, reducing the time spent on configuration and streamlining the rule creation process.

For more information, see OneTrust Consent Management App for Snowflake.

Major and Minor Purpose Changes

Select the type of change for your purpose of processing on the Purpose details screen when creating a new version. This enhancement allows you to have more control and clarity over consent changes, strengthening compliance and reinforcing regulatory alignment. In addition, the Purpose Published integration event has been added to consent integration events in Integrations. This enhancement allows you to trigger an event each time a new version of a purpose is published, enabling programmatic decision-making such as initiating a re-consent workflow or other automated actions, providing you with a more seamless integration across systems.

For more information, see Understanding Purpose Versioning, Setting Up Purposes of Processing, and Consent Integration Events.

Copy a Preference Center into a Trust Center

Migrate an existing preference center into a Trust Center from the available actions on the Preference centers screen. This enhancement allows you to easily duplicate your current preference center configuration and automatically migrate all compatible components to your Trust Center setup, saving you time and simplifying the setup process.

For more information, see Copying a Preference Center into a Trust Center.

Protected Magic Link Settings

The Magic links screen in Consent Global Settings has been updated to provide more robust protection for magic link settings. This enhancement allows you to configure reinforced controls to prevent accidental misuse, providing you with a more stable and reliable platform experience.

For more information, see Universal Consent & Preference Management Settings.

Unified Purpose

Gain full oversight into all aspects involved in processing personal data with the Purpose object. Available in Global Data Manager, this centralized object type provides cross-solution insights into how personal data collected for that given purpose is used across your business, so that you are better able to associate objects like data elements, processing activities, vendors, collection points, and projects through a common and central object.

For more information, see Unified Purpose Feature Guide.

High-Performance Bulk Import Multi-File Support

Upload multiple files clicking the Select file button on the New import modal when using the Stream consent receipts bulk import type. This enhancement allows you to select multiple files simultaneously from any folder on your operating system, improving the user experience through a more streamlined and efficient process.

Get List of Bulk Export Download Details API

Added the new Get List of Bulk Export Download Details API to the Bulk Export APIs to retrieve the download details for a bulk export with paginated results. This API allows you to pass the continuationToken and size parameters, optimizing response times and mitigating any possible timeout errors.

New Public Preview Features

Purpose Data Usage

Drill into specific purposes across the platform and inspect their usage details. This central reporting screen provides privacy managers a central location for monitoring where a given purpose is used to better manage those records.

For more information, see Unified Purpose Feature Guide.

Fixed

  • Resolved an issue that prevented the Data Subject Consent report from accurately displaying the latest transaction date and most recent consent status, causing mismatches between the information provided on the platform and calling the v1 Get List of Data Subjects API. These discrepancies, previously caused by data synchronization delays, no longer occur.

  • Resolved an issue that prevented consent integration event payloads from returning data for the LastInteraction parameter, causing integration workflows to remain in halted state.

  • Resolved an issue where purposes were not populating correctly on the Data model and metadata screen of the OneTrust Consent Management native app in Snowflake.

  • Resolved an issue where the Get Data Subject Details API returned multiple privacy notice versions associated with the same purpose. A new logic has been implemented to ensure that previous notice versions are replaced by the latest applicable version.

  • Resolved an issue that prevented the one-click unsubscribe functionality from working as expected.

  • Resolved an issue that caused the pagination controls at the bottom of the Scheduled items screen to be hidden when viewing consent retention policies on the Data retention menu.

  • Resolved an issue that caused data subject identifier values to display incorrectly as “Processing…” on the Transactions tab of the Receipts screen after bulk importing consent records using the Create / Update Data Subject Consent import template. In addition, a related issue where the identifier parameter returned a null value in the response of the Get List of Transactions API has also been resolved.

  • The v4 Get List of Data Subject Group Members API now returns information about updates to data subject groups performed either through the Groups screen on the platform or via the v2 Update Data Subject Group API.

  • Resolved an issue that prevented the Get Data Subject Details API from returning the correct privacy version after submitting an old notice version through the Create Consent Receipts API.

  • The Get Data Subject Details API no longer returns details of parent data subjects when passing a data element in the identifier header parameter.

  • Resolved an issue that prevented the Create Consent Receipts API from transferring purposes after data subject merge when enableDataElementDateValidation was set to true.

  • Resolved an issue where the v4 Get Data Subject Token API returned an outdated data subject link token, while the v1 Get List of Data Subject Tokens API and the platform correctly displayed the latest token. Link tokens are now consistently aligned across API responses and the user interface.

  • Resolved an issue where an error message appeared for data subjects containing accented characters when using the Exclude data subjects from deletion bulk import template even when the data subject existed in the account and was visible on the Profiles screen.

  • Resolved an issue where deleted data subject profiles associated with multiple purposes were still appearing in consent reports, resulting in the dashboard incorrectly displaying a count of one rather than zero after deletion.

Existing Public Preview Features

CMP Consent Context

Added support to our existing data hierarchy to allow CMP consent users to provide consent for a purpose multiple times when using consent groups. When using consent groups with the unified profile feature, the CMP will use the same data subject for different consent groups, eliminating the need to create additional profiles.

Things to Know

  • Error 500 responses returned by the v4 Data Subject APIs have been standardized to comply with established API conventions, such as OpenAPI and JSON error schema. These messages now follow a predictable format to maintain consistency.

Accessibility Conformance

  • Screen readers correctly announce the CAPTCHA code and display the corresponding background color for the CAPTCHA field when navigating OneTrust hosted web form collection points (WCAG-A 1.1.1: Non-text Content and WCAG-A 4.1.2: Name, Role, Value).