Product Updates

New in Osano: attachments, config sorting, and more!

posted on April 6, 2022

This past month we shipped several enhancements and bug fixes to the Osano privacy platform. Read on to learn about what’s new for Osano in March 2022. 

DSAR secure attachments

DSAR message portal demo

When a data subject submits a DSAR, you must verify their identity before you can process the request. Osano’s DSAR web forms have a built-in attachment field to upload files such as a photo with a government ID. But what if you need to share files back and forth with more context? 

Osano Data Subject Rights comes with a secure messaging portal you can now use to send and receive files. Osano scans each attachment for viruses to keep you and your users safe.

In some cases, you may get a DSAR submitted on someone else's behalf. Along with their ID verification, you’d need a copy of their power of attorney. Now, you can request the power of attorney via the secure messaging portal. The data subject can use the portal to send the file for a seamless experience. 

When you receive an access or portability request, you may need to share a full copy of the data with the subject. Now, you can send those files via the secure messaging portal as well.

DSAR message portal screenshot

X to close on banner 1

Consent banner with x screenshot

Osano Consent Management Platform (CMP) provides compliant banner templates for 50+ countries. 

This past month we added an X to close the dialog for consent dialog 1. (Dialogs use a banner or box depending on your config and both now have the X.) This dialog appears and then disappears after a timeout. Before, website visitors were not able to dismiss the banner/box and needed to wait for the timeout. Now, they can click the X to dismiss the dialog. This has been a popular feature request due to the improved user experience. 

Clicking the X has the same effect as the timeout: Osano implies consent and accepts all cookies. Uses can remove consent by updating their settings using the Osano Storage Preferences.

Countries that use Dialog 1:

  • Australia
  • Canada
  • Japan
  • Russia
  • South Korea
  • Switzerland
  • United States (with CCPA Opt-Out enabled)
  • All other unspecified countries

Like all CMP updates, you must publish before the change will go live. If you use CSS to override the Consent Dialog 1 styles, test the update to make sure it appears how you want it to.

CMP configuration sorting

Configuration sorting demo

When you only have one website, you can manage cookie consent with only a few CMP configurations. Often, folks have one for testing on a staging site and one for the public site. But folks with many websites may have hundreds or even thousands of configurations. Each domain with unique banner styles or a unique set of cookies to categories needs its own config.

This past month we shipped a small quality of life improvement to Osano CMP that is sure to make a big difference. You can now sort and filter, so you can sift through a mountain of configurations in a few seconds. We also added the Created date to the user interface to help you find the right configuration fast.

Sort by

  • Name
  • Domain
  • Created date
  • Updated date
  • Compliance Mode
  • Publish Status

Filter by

  • Compliance Mode 
  • Publish Status 

Configuration sorting screenshot

New integrations for Data Discovery

Osano Data Discovery finds data fields in your apps and categorizes them using AI. Our growing catalog of 40+ integrations helps you:

  • Find user data for data subject rights requests
  • Run data assessments in less time
  • Prove compliance with a categorized log of apps that store personal information

This month’s new integrations:

  • Wista
  • Trello
  • Recurly
  • Square
  • Big Commerce
  • Braintree
  • Slack
  • Sendbird

And more!

For a full list of improvements see the March 2022 release notes.



Introducing AMP support for Osano Consent Manager

posted on January 14, 2022

Capturing user consent to store cookies isn’t always as simple as running a standard JavaScript snippet. Some web frameworks require unique code to work properly. This is the case for AMP (previously referred to as “Accelerated Mobile Pages”). When it comes to capturing consent on an AMP page the standard approach doesn’t work. That’s why we are excited today to announce Osano’s support for AMP. You can now install Osano Consent Manager on your AMP pages and enjoy all the benefits of privacy compliance that you do on your standard websites.

What is AMP? 

AMP is an open source web framework for creating web content such as pages, emails, and ads, that run and load very quickly. Previously referred to as, “Accelerated Mobile Pages,” AMP pages tend to perform faster because they are simplified versions of the full page and most are delivered by Google's AMP cache. AMP works particularly well for mobile because it can load quickly even when someone has a spotty internet connection. AMP pages tend to rank well in search engines because of their high performance. In particular, media and content sites, such as Dallas Morning News, rely on AMP as a key part of their content distribution strategy. 

How does Osano Consent Manager for AMP work? 

AMP pages are built using framework components. Osano Consent Manger uses the amp-consent component. When building your page you include the amp-consent component script in your page’s <head> tag and include the amp-consent component itself in your page’s body. See the Osano AMP quick start for a complete set of step-by-step instructions. 

Osano Consent Manger for AMP Features

  • Share user consent between your AMP and full sites. Users only have to consent once.
  • Share your configuration between both sites as well. The same UI will be displayed and any changes will be applied to both.
  • Users may update their consent preferences through the AMP version.
  • Conforms to the amp-consent component specification so it is fully AMP compliant.

Why does this matter?

With Osano Consent Manager for AMP, you can now capture and manage consent across your standard and AMP pages using the same Consent Management Platform and the only consent manager backed by a No Fines, No Penalties Pledge!


Product(s) Affected

Consent Management



Saudi Arabia and UAE banner updates

posted on January 4, 2022

Recent legislation requires a change to how cookie consent should be managed for users in the United Arab Emirates and Saudi Arabia. To comply with these new regulations, Osano Consent Management Platform (CMP) has updated the banners that are served to users in these regions. To enable the new banners on your site be sure to republish your configuration.  

Saudi Arabia has recently adopted the Personal Data Protection Law (PDPL), which will regulate data transfers and the collection, processing and sharing of personal data of residents and citizens of Saudi Arabia. The PDPL will go into effect on March 23, 2022, although additional regulations are expected. The new law provides rights to data subjects such as the right of access, correction and deletion, as well as the right to claim damages for material and non material harms. The PDPL requires consent for the collection of personal data, imposes data minimization principles and restrictions on retention as well as sharing of personal data. The maximum penalties of a provision of the regulations or rules are up to two years in prison or up to five million rials of fines. (Fines may be doubled if repeated offenses have occurred to up to ten million rials.) The law is clear that it applies to companies outside of Saudi Arabia that collect or process the data of individuals who are citizens or residents within the Kingdom.

Similarly, on Nov.  28, 2021, the UAE also enacted a comprehensive Personal Data Protection Law (PDPL), the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection. The new law applies to the processing of personal data of residents whether or not that processing takes place within the UAE and includes a fairly strict requirement for consent prior to processing personal data. The new law also provides data subject rights such as the right of correction and the right to restrict or stop processing of personal information. In addition, requirements outline the cross-border transfer and sharing of personal data for processing purposes. The law establishes the UAE Data Office, which will be responsible for preparing policies, additional regulation and guidance. The law became effective on Jan. 2, 2022.

To help you comply with this new legislation, Osano’s default banner behavior has been updated to show different banners to users in these regions. Because UAE and Saudi Arabia’s new laws enforce similar user protections as the European Union’s GDPR, these regions will now use the same banner with the ability to accept all, reject all and customize privacy preferences.

Again, to enable the new banners on your site be sure to republish your configuration.  

Why does this matter?

Both Saudi Arabia and the UAE's new laws provide data subjects with more rights than they previously had, and the updated banners ensure you're allowing them to exercise those rights. The banners help you to:

  • Comply with both new laws.
  • Help data subjects feel empowered.


Product(s) Affected

Core Platform



The managed data privacy platform

Get started with Osano today

Explore Osano

What's New at Osano

Introducing Osano Privacy Legal Templates

Now, with Osano Privacy Legal Templates you can get started faster by leveraging templates generated by our global team of privacy experts.

Learn more

Introducing DSAR email intake

Capture data subject rights requests with the convenience of email and the efficiency of a dedicated intake form.

Learn more

New reworked DSAR and discovery

We've reworked and redesigned Osano Subject Rights Management and Data Discovery, unifying them into a single, seamless experience and creating automation to save you time.

Learn more

Stay GDPR compliant under new French ruling

Privacy regulators at the CNIL in France recently declared that Google Analytics violates GDPR. Osano’s new block list feature can disable Google Analytics in France to keep you compliant while allowing you to use Google Analytics in regions where it is still legal.


New in May 2022: DSAR conditional fields, 28 new integrations, and more!

Customize DSAR forms with conditional fields, serve consent banners in additional languages, use 28 new integrations for Data Discovery, and more! Check out our latest product announcement blog for demos, links, and more information.


View more product updates

Osano product & engineering teams have been hard at work. View the full list of all product updates.

View Product Updates