Mobile & OTT/CTV App Consent - September 4, 2026 - 202609.1.0
Fixed API
-
Resolved an issue where IAB TCF and GPP consent string values were not recomputed when an Age Gate was enabled after a user had already provided consent. Consent strings are now correctly recalculated when Age Gate or App Tracking Transparency (ATT) conditions change, ensuring generated consent signals accurately reflect the user's current consent eligibility and preferences.
-
Resolved an issue that caused general vendor consent calculations linked to purposes to use
consentToggleStatusinstead ofconsentStatus. Vendor consent values are now calculated using the correct consent state. -
Resolved an issue that allowed
AGEGATE_RANGEinteractions to be created without a valid age range. CMP API responses now includeERROR_CODE_AGE_RANGE_REQUIREDfor thecodeparameter andAt least one age bound (lower or upper) must be providedfor themessageparameter. This change ensures age range interactions include at least one valid age bound.
Fixed Android
-
Resolved an issue that prevented the consent status for General Vendors from changing when end users updated the consent status of a linked bundle group.
Fixed Roku
-
Log messages in
Info.OneTrustfor the Roku SDK have been updated to indicate when Age Gate is not initialized. This more clearly communicates that Age Gate was not ready when an action was attempted and helps distinguish the condition from an error.addendum: This release note was added on September 11, 2026.
New Public Preview Features
- Enhancements to Consent Management Platform (CMP) APIs
-
The following enhancements have been made to the CMP APIs:
-
Added the
closeButtonAriaLabelkey toglobalOptOutData, mapped fromGlobalOptOutFormIntegration.GlobalOptOutCloseButtonAriaLabel. This provides accessibility support for the Global Opt-Out close button in the CMP APIs. -
addendum: The release note pertaining to
webdevice type support for the Get Banner Data API was removed on September 25, 2026. -
addendum: The release note pertaining to optimized vendor filtering logic was removed on September 25, 2026.
-
addendum: The release note pertaining to per-request caching for purpose data retrieval was removed on September 25, 2026.
-
Existing Public Preview Features
- Consent Management Platform APIs
-
The following APIs are available for retrieving the interface attributes needed to display the banner and preference center, retrieving active IAB and Google vendor information, logging consent interactions, and submitting global opt-out data subject access requests. These APIs enable developers to retrieve the data required for banner and preference center experiences, disclose vendor information to end users, capture consent preferences, and support Global Opt-Out workflows across devices and services.
- Roku Support for Unified Consent Profile for Known Users
-
Leverage the new Unified Consent Profile for Known Users functionality to connect data subjects' CMP preferences with Universal Consent & Preference Management profiles by enabling the Create data subject profiles for known users setting on the Geolocation Rules tab. You can also easily trigger integration workflows to send CMP preferences to downstream systems, and efficiently manage your preferences in a unique Preference Center, centralizing all of them in one single profile.
This enhancement provides a comprehensive view of data subjects empowering you with more control over the data captured across both modules, resulting in a more streamlined and tailored user experience.
For more information, see Connecting CMP preferences with Universal Consent & Preference Management Profiles.
- Configure Button Layout for the Banner
-
Configure the positioning of buttons on your mobile and CTV banners within the Button Sets section of the Template Details screen. This enhancement allows you to specify the positioning of buttons on your banners for a more customized experience.
-
iOS
-
Android
For more information, see Customizing the Mobile App Consent Banner Template and Customizing the Mobile App Consent Preference Center Template.
-
- Enhanced Branding Settings for Mobile and CTV SDKs
-
Configure detailed branding settings for your mobile SDKs on the Branding tab of the Mobile App Details and CTV App Details screen, respectively. This enhancement enables you to configure more specific branding settings for each of your mobile and CTV applications.
For more information, see Configuring Mobile and CTV App Branding.
- Validation for Cross-Device Consent Receipts
-
Enable the Require Authentication for known users setting when leveraging Cross-Device Consent to require validation on your consent receipts. This enhancement allows you to more reliably collect consent from known users.
For more information, see Configuring Geolocation Rules.
Note:This enhancement is only available to users with the Consent Rate Optimization (CRO) add-on package. Contact OneTrust Support or your account representative to enable this functionality.
To learn more, see Maximize Opt-Ins with Consent Rate Optimization.
- Authenticated Consent for New and Existing Users
-
Transfer consent from local storage to new and existing data subject IDs (DSIDs) for user profiles when leveraging Cross-Device Consent. This enhancement allows you to apply previously captured consent to user profiles to streamline consent collection.
This feature is available for the following platforms:
-
iOS
-
Android
-
Apple TV
-
Android TV
-
- Enable Global Privacy Protocol on TCF 2.2 Templates
-
Enable the Global Privacy Protocol setting on TCF 2.2 templates. This setting allows you to enable the IAB Tech Lab - Global Privacy Protocol (GPP) and populate the IAB TCF EU section of the GPP string.
This feature is available for the following platforms:
-
Android
-
Android TV
-
Apple TV
-
HTML5
-
iOS
-
Roku
-
Unity
-
Xamarin
For more information, see Configuring the Global Privacy Protocol Settings.
-
- New Reject All Button Configuration
-
Enable the updated Reject All button configuration on the Preference Center template. This new configuration ensures that legitimate interest is not impacted for customers using Google Ads.
For more information, see Customizing the Mobile App Consent Preference Center Template.
Things to Know
-
The
setOTOfflineData()method is now available for use with the React Native SDK on Android and iOS devices. -
The Android SDK now supports more consistent network reconnection to improve connectivity resilience when encountering suboptimal network conditions or functioning offline.
addendum: This release note was added on September 11, 2026. -
Banner QR codes now display with fixed width on tvOS devices to prevent text truncation and layout inconsistencies.
addendum: This release note was added on September 11, 2026. - About Known Defects
-
Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.