/ /

September 2026 Release Notes

Updated 22 hours ago

What's new for Osano in September 2026

Note: Any Consent Manager Platform (CMP) changes will be inherited by consent manager configurations after they are republished. Please be sure to test all changes.

Enhancements

  • September 29 11:40 AM CDT

    • Cookie Consent

      • Osano consent banners now offer a new Modern design option with a cleaner, more current look, while keeping all of your color settings. Existing configurations keep their current Classic design and can switch any configuration to Modern from the Styles tab whenever ready.

      • A new Load Osano Styles from Separate Stylesheet option, found in the Performance section under Advanced Settings, lets your consent banner load its styles from a separate stylesheet that browsers can cache, which makes the Osano script smaller. It's available on all plans, and your install code stays the same. If your site uses a Content Security Policy, allow stylesheets from cmp.osano.com before you turn this on.

  • September 24 10:00 AM CDT

    • Data Subject Rights

      • We've redesigned the Request Types page so it's easier to review and manage how each request type is set up on your forms.

        • Table view: All request types now appear in one table, with columns for jurisdiction, verification method, authorized representative and category. You can compare settings across request types without opening each one.

        • Faster navigation: Use search, filters and display options to find the request types you need, and reorder them straight from the page.

        • Focused editing: Select any request type to open its settings in a dedicated edit window, including title, description, instructions, jurisdictions, verification method and authorized representative options.

      • Your existing request type settings haven't changed. Only the layout is new.

  • September 23 1:48 PM CDT

    • Cookie Consent

      • Added Malta to the territory preview map so that banner settings can now be previewed for that region.

  • September 17 5:25 PM CDT

    • Cookie Consent

      • All text customization fields now support multi-line formatting, including line breaks and spacing, consistent with existing fields.

    • Subject Rights

      • The action item API now accepts multiple assignees per update, and the separate Claimed status was merged into In Progress.

      • Action items now show a message when someone else has already updated the item, prompting you to reload instead of overwriting their changes.

  • September 16 2:41 PM CDT

    • Cookie Consent

      • Updated consent banners to meet the IAB TCF v5.0.b policy, adding feature explanations and illustrations and renaming a special feature label.

  • September 15 2:41 PM CDT

    • Subject Rights

      • Updated the action item status column to use color-coded status pills, matching the request list page design.

      • Changed the default request actions notice on data stores from a warning to an informational message.

      • Action item details now label regulatory and internal due dates, show overdue dates in red, and reveal exact dates via tooltip.

  • September 14 4:05 PM CDT

    • Subject Rights

      • The REST API now sends an unassignment event when an action item's assignee is removed, so it appears in the Activity Log.

  • September 10 1:19 PM CDT

    • Cookie Consent

      • Added an Organization selector when creating a new configuration, so it is assigned to the correct organization automatically.

    • Compliance Check

      • Redesigned exportable PDF report: Compliance Check reports now features a design that makes scan results easier to review and share. The updated report includes a scannable summary of passed, warning, and failed checks; clearer visual status indicators. The redesign improves how results are presented without changing the underlying scan logic or findings.⁠

  • September 9 8:46 AM CDT

    • Subject Rights

      • The Action Items REST API now supports assigning a privacy request action item to multiple assignees.

  • September 8 2:00 PM CDT

    • Cookie Consent

      • You can now choose how consent banners are shown across US states directly in your configuration. Under Advanced Settings, enable US State Level Banner Format to serve the opt-out banner across all US states, require opt-in across all US states, or select exactly which states receive the opt-in banner. Osano detects visitors' states automatically, and settings apply per configuration, so different sites can use different rules. Leave the setting off to keep Osano's curated default, which serves the opt-in banner in states with active privacy legislation and the opt-out banner elsewhere.

      • Read more in US State Level Banner Format Customization

Bugs

  • September 23 4:48 PM CDT

    • Cookie Consent

      • Fixed an issue where an icon caused the cookie preferences button to be announced twice by screen readers.

    • September 22 1:26 PM CDT

      • Cookie Consent

        • Fixed an issue where localStorage writes made through the CMP were silently discarded on pages that reassign the global Storage constructor.

    • September 22 11:51 AM CDT

      • Cookie Consent

        • Fixed the cursor on disabled toggles, such as the Essential category, so they no longer appear clickable in the consent preference drawer.

    • September 17 4:19 PM CDT

      • Subject Rights

        • Fixed an issue where vendor notification emails displayed a placeholder value instead of blank for disabled form fields.

    • September 14 4:18 PM CDT

      • Unified Consent

        • Fixed a display issue where the Changed Consents chart legend appeared in its own column instead of the normal layout.

    • September 14 2:42 PM CDT

      • Cookie Consent

        • Fixed an issue where a conflicting third-party script could prevent the Manage Preferences button from opening the consent drawer.

    • September 14 12:50 PM CDT

      • Cookie Consent

        • Fixed an issue where the Configs API rejected valid, URL-encoded spaces in configuration names when searching by name.

    • September 11 11:06 AM CDT

      • Subject Rights

        • Fixed an issue where the save changes dialog appeared when leaving a form template page even though changes had already been saved.

    • September 11 9:02 AM CDT

      • Subject Rights

        • Fixed issues where data store integrations using page-based pagination could stop early or continue longer than necessary.

    • September 10 4:28 PM CDT

      • Subject Rights

        • Fixed an issue where changes could not be saved in the DSAR form.

    • September 10 12:01 PM CDT

      • Cookie Consent

        • Fixed an issue where Do Not Sell or Share by Default applied everywhere GPC is supported instead of only in regions where the DNS/S toggle appears.

    • September 8 1:22 PM CDT

      • Cookie Consent

        • Fixed an issue where Osano was conflicting with widgets on pages where a third-party script has disabled stack capture.

    • September 3 4:39 PM CDT

      • Subject Rights

        • Fixed an issue where request-type instructions did not appear on the public DSAR form, so data subjects can now see guidance for their request.

    • September 3 1:10 PM CDT

      • Cookie Consent

        • Fixed an issue where a newly invited Configuration Manager with an Organization added could see all configurations until their account was edited and saved again.

Was this article helpful?
Subscribe to receive updates on this article