Data Subject Request (DSR) Automation - November 13, 2026 - 202611.1.0 (Fall Release)

General Availability

Manage DROP Requests with OneTrust

Leverage OneTrust's DROP support to automate DROP request intake and status reporting. This enhancement enables California-registered data brokers to automatically download hashed requests on a defined schedule and posts status updates back to DROP.

For more information, see Managing Delete Request and Opt-Out Platform (DROP) Requests and Creating a Workflow for Managing DROP Requests.

New DROP Management APIs

Added the Create Data Subject Request for DROP Record API, Update DROP Record API, and Get List of DROP Records API to create, update, and retrieve Delete Request and Opt-out Platform (DROP) requests, respectively. These APIs support California-registered data brokers in managing DROP requests for deleting or opting out data subjects permanently.

Table Enhancements for Data Subject Request (DSR) Automation
Tables and table functionalities have been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs. Tables have been updated on the following tabs and modals within the Data subject request details screen:

  • ID verification tab on the Data subject request details screen

  • Add connection and Existing connections screens accessed via the Subtaks tab of the Data subject request details screen

  • Data subject request details

  • Suggested redactions tab on the Data subject request details screen when viewing the Results summary screen

  • The following tabs on the Redaction preferences screen:

    • Default classifiers

    • Custom keywords

    • Structured Data Redaction

For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Fixed

  • Resolved an issue that caused the Create Request API to return a status of UN_PROCESSED instead of FAILED when a required email was missing from the request.

  • Resolved an issue that caused the Attachments tab on the Results summary screen to displaying in English instead of the user's language of choice.

  • Resolved an issue that prevented split-document merges from completing and included an earlier version of a section's redactions instead of the most recent changes.

  • Resolved an issue that caused the automatic page refresh on the Results summary screen to clear bulk document selections.

  • Resolved an issue that prevented correct file counts from displaying in the redaction tool after document splitting.

  • Resolved an issue that caused the redaction tool to incorrectly redact entire lines of text in PDF documents, despite the user only selecting a small section of text to redact.

  • Resolved an issue that prevented PST files from being successfully downloaded when they contained redacted files that had already been shared via a results summary.

  • Resolved an issue that caused the Include in report filter on the Attachments tab of the Results summary screen to return inaccurate results.

  • Resolved an issue that prevented files from being successfully downloaded on iOS devices when using the Privacy Portal.

  • Resolved an issue that prevented existing DROP requests from displaying on the DROP requests screen when a new request was in a processing state.

New Public Preview Features

CAPTCHA Enhancements

Protect against bot activity with the introduction of Google reCAPTCHA V3 and Cloudflare Turnstile. This enhancement offers a configurable, multi-layered defense against malicious bot activity and reduces illegitimate DSR requests.

For more information, see Managing Web Form Settings.

CSRF Token Adoption
Reduce bot and automated DSR requests by implementing Cross-Site Request Forgery (CSRF) token on each web form submission. This enhancement blocks programmatic submissions at the form layer, without adding additional friction for your users.

For more information, see Web Form FAQ.

Accessibility Conformance

  • The Attach file button now correctly uses a button role to ensure compatibility with assistive technologies (WCAG‑A 4.1.2: Name, Role, Value).

Things to Know

Improvements to the DROP Integration screen

The DROP Integration screen has been updated with improved descriptions, updated field labels, and new import status information to enhance the user experience.

Retry Failed DROP Events

You can now retry failed DROP events via the DROP processing history list screen for processing events that were triggered via API. Retry is available for failed download and upload events.

Improvements to the Web Form Templates Screen

Text in the Create web form button now displays on a single line, and the search bar has been moved to below the Create web form button on the Web form templates screen.

Improvements to the Skip Stage Rule Flow

Users will now be prompted via a pop-up message to refresh the page after a skip rule has been executed so the correct stage displays.

Improvements to the Add Connection pane

The Add connection pane has been updated with layout improvements to ensure that pagination and header text display correctly.

PDF Redaction Enhancements

Multi-layered PDF files are now automatically detected and flattened before redactions are applied, ensuring that redactions cover all content layers rather than only the text layer.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.