Privacy Rights Automation - September 4, 2026 - 202609.1.0

General Availability

Select Multiple Subtasks in Workflow Stage Rules

Users can now select multiple subtask templates when configuring a Create subtask stage rule action. This enhancement helps you automate more complex workflows and reduce manual subtask creation.

For more information, see Adding Rules to Workflow Stages.

New Privacy Workflows

Leverage new and updated privacy workflows for enhanced compliance with US, EU, and international privacy laws, including:

  • 98 new and updated workflows, featuring content based on the comprehensive privacy laws of the following 13 US states:

    • Alabama

    • California

    • Colorado

    • Connecticut

    • Indiana

    • Kentucky

    • Louisiana

    • Oklahoma

    • Oregon

    • Rhode Island

    • Texas

    • Utah

    • Virginia

  • 45 new workflows featuring content based on the comprehensive privacy laws of the following 7 jurisdictions:

    • France

    • India

    • Italy

    • Saudi Arabia

    • Spain

    • Switzerland

    • Vietnam

  • An updated version of the default workflow.

For more information, see Managing Language Options for Privacy Rights.

Fixed

  • Resolved an issue that sent unexpected verification reminder emails for expired requests when the reminder setting had recently been enabled on a web form.

  • Resolved an issue that prevented subtasks created via Use a subtask template from displaying as options for the subtask resolution condition when configuring workflow rules.

  • Resolved an issue that caused the text that explains why the Submit button is disabled to be overwritten when switching languages and updating unrelated visibility rules.

    addendum: This release note was added on September 11, 2026.

  • Resolved an issue that caused content from multiple response templates to display in the editor when selecting and removing different response templates.

    addendum: This release note was added on September 11, 2026.

  • Resolved an issue that caused duplicate request records to display on the Requests screen and subtasks from different workflow stages to display on stages for which they were not configured.

    addendum: This release note was added on September 11, 2026.

New Public Preview Features

New Get List of DROP Records API

Added the Get List of DROP Records API to retrieve DROP records with support for filtering, pagination, and sorting. This API enables developers to programmatically query DROP records by criteria such as status, created date, and updated date, making it easier to monitor and manage DROP request processing workflows.

Existing Public Preview Features

Table Enhancements for Results Summary

Tables and table functionalities have been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs. Tables have been updated on the following tabs and modals within the Data subject request details screen:

  • Attachments tab

  • Review file segments modal

  • Structured data tab

  • Suggested Redactions tab

Note:

Select tables across Privacy Rights Automation may support these enhancements while others may not. These updates will continue to roll out incrementally so availability may vary.

For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Manage DROP Requests with OneTrust

Leverage OneTrust's DROP support to automate DROP request intake and status reporting. This enhancement enables California-registered data brokers to automatically download hashed requests on a defined schedule and posts status updates back to DROP.

For more information, see Managing Delete Request and Opt-Out Platform (DROP) Requests and Creating a Workflow for Managing DROP Requests.

New DROP Management APIs

Added the Create Data Subject Request for DROP Record API and the Update DROP Record API to create and update the status of Delete Request and Opt-out Platform (DROP) requests, respectively. These APIs support California-registered data brokers in managing DROP requests for deleting or opting out data subjects permanently.

Things to Know

TheSettingsbutton has been removed from theCollectionscreen inData Redactionto align with least privilege access principles.

The following email templates have been added to the CookiePro environment:

  • DSAR group assigned case

  • Data subject group assigned request reminder

  • Data subject request subtask comment added

  • Data subject request deadline paused

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.