---
title: "Update Existing Collection Point"
method: PUT
path: "/api/consentmanager/v1/collectionpoints/{collectionpointId}"
tags: ["Collection Points"]
---

# Update Existing Collection Point

`PUT /api/consentmanager/v1/collectionpoints/{collectionpointId}`

Use this API to update an existing Collection Point. Before calling this API, ensure that the Collection Point is in **Draft** status. If the Collection Point is in **Active** status, use the Create New Collection Point Version API to create a new version of the Collection Point.

> 🗒 Things to Know
> 
> - One of the following parameters must be included in the API request body: `PurposeId`, `PurposeIds`, or `PurposeIdsWithVersion`.
> - The `PurposeId` and `PurposeIds` parameters can be used to link an **Active** version of a purpose to a Collection Point.
> - The `PurposeIdsWithVersion` parameter can be used to link specific versions of a purpose (either in **Draft** or **Active** status) to a Collection Point.

## Path parameters

- `collectionpointId` string, uuid, required

## Query parameters

- `version` integer

## Request body

- ConsentPreferencesUniversalConsentPreferenceManagCollectionPointEditRequest
  - `OrganizationId` string, uuid, required — The unique identifier of the Organization associated with the Collection Point. Note: this can be found in the URL path when viewing Organization details under global settings.
  - `PurposeId` string — Comma-separated list of Purpose unique identifiers. Will default to the most recent purpose version. It is recommended to use the `PurposeIdsWithVersion` field and specify the desired version.
  - `PurposeIds` string[] — List of Purpose unique identifiers. Will default to the most recent purpose version. It is recommended to use the `PurposeIdsWithVersion` field and specify the desired version.
  - `Name` string, required — The unique name of the Collection Point. This is a required field and must be unique within the organization. The name is used to identify the Collection Point in the UI and API.
  - `Description` string, required — Detailed description of the Collection Point. This should explain the purpose and functionality of the Collection Point.
  - `WebFormUrl` string, uri — The URL where the web form is hosted. This is required for HOSTED_WEB_FORM collection points. The URL must be a valid HTTPS URL.
  - `PrivacyPolicyUrl` string, uri — The URL of the privacy policy associated with this Collection Point. This is typically displayed to users when they are providing consent.
  - `SubjectIdentifier` string — The Data Subject identifier of the Collection Point. Note: this string is the Data Element name when viewing details under the Consent & Preference Management module
  - `IdentifierTypes` string[] — Used in conjunction with the `AllowMultipleIdentifierTypes` setting. The List of Data Subject identifiers that can be used for the Collection Point
  - `AllowMultipleIdentifierTypes` boolean — Allow the Collection Point to generate data subjects with more than one identifier. Note: this feature is under preview for `API` and `HOSTED_WEB_FORM` Collection Points only
  - `IdentifierDataElementId` string, uuid — Unique identifier for the Data Element. Note: this can be found in the url path when viewing Data Element details under the Consent & Preference Management module
  - `ConsentType` 'FORMSUBMIT' | 'EXPLICIT' | 'UNAMBIGUOUS' | 'OPTINCHECKBOX' | 'OPTOUTCHECKBOX' | 'SINGLETRIGGER' | 'CONDITIONALTRIGGER' | 'COOKIEBANNER' | 'UNCHECKOPTOUT' | 'CHECKOPTOUT' | 'EXPLICIT' | 'IMPLIED' | 'NOTICE_ONLY' | 'CONSENT' | 'LEGITIMATE_INTEREST' | 'FORMSUBMIT' | 'UNAMBIGUOUS' | 'OPTINCHECKBOX' | 'OPTOUTCHECKBOX' | 'SINGLETRIGGER' | 'CONDITIONALTRIGGER' | 'COOKIEBANNER' | 'UNCHECKOPTOUT' | 'CHECKOPTOUT' — The type of consent mechanism used by this Collection Point. This determines how consent is captured and processed. For example, EXPLICIT requires explicit user action, while IMPLIED infers consent from user behavior.
  - `CollectionPointType` 'WEB_FORM' | 'MOBILE_APPLICATION' | 'BULK_IMPORT' | 'API' | 'PREFERENCE_CENTER' | 'COOKIE' | 'TRUST_CENTER' | 'NOTIFICATION_OPT_OUT' | 'ADMIN_UPDATE' | 'HOSTED_WEB_FORM' | 'EMBEDDED_WEB_FORM' | 'WEB_FORM' | 'API' | 'COOKIE' | 'NOTIFICATION_OPT_OUT' | 'ADMIN_UPDATE', required — The type of the Collection Point. This determines the behavior and features available for the Collection Point. For example, WEB_FORM is used for web-based consent banners, while API is used for programmatic consent management.
  - `DataControllerName` string — The name of the data controller responsible for this Collection Point. This is typically the organization or entity that determines the purposes and means of processing personal data.
  - `RightToWithdraw` string — Information about the data subject's right to withdraw consent. This is typically displayed to users to inform them of their rights.
  - `HowToWithdraw` string — Instructions on how a data subject can withdraw their consent. This should provide clear, actionable steps.
  - `OtherInformation` string — Any additional information relevant to the Collection Point that doesn't fit in other fields. This could include legal basis for processing or other compliance-related information.
  - `DoubleOptIn` boolean — Indicates whether double opt-in is required for this Collection Point. When enabled, users must confirm their consent via email.
  - `DOISendConfirmationEmail` boolean — Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom email or sms messages
  - `DoiEmailToParent` boolean — When enabling the parental consent feature and double opt-in emails, emails will be sent to the parent identifier by default instead of the child identifier. This is part of the parental consent preview feature.
  - `consentDOICancelOption` boolean — When enabled, allows sending a cancellation notice for double opt-in (DOI) consent. This is used when a user cancels their consent during the double opt-in process.
  - `includeParameter` boolean — When enabled, includes additional parameters in the double opt-in (DOI) confirmation link. This can be used to pass through custom parameters during the DOI process.
  - `RedirectUrl` string, uri — The URL to redirect users to after they have completed the consent process. This is typically a thank you page or the main website.
  - `IABVendorId` integer — The IAB Vendor Id. Used for legacy mobile Collection Points
  - `DataElements` string[] — List of data element IDs that this Collection Point will collect consent for. Each data element represents a specific type of data processing activity.
  - `Language` string — The Collection Point default language code
  - `Languages` string[] — List containing the Collection Point translations' language codes
  - `NoConsentTransactions` boolean — Whether no consent transactions can be recorded against the collection point. For more information about consent transaction types and purpose statuses see this [article](https://my.onetrust.com/s/article/UUID-d4ed05a9-a999-f2cb-8272-610a5817b43f?topicId=0TO1Q000000bHgoWAE)
  - `HostedSDK` boolean — Whether the SDK settings are published to external storage for quicker integration. This is enabled by default for all web form type collection points
  - `SendConsentEmail` boolean — Switch on or off the Consent Acknowledgement Email feature for a Collection Point
  - `PreferenceCenterGuid` string, uuid — Unique identifier for a Preference Center to associate with this Collection Point
  - `ResponsibleUserId` string, uuid — The Unique Identifier of the Responsible User. Note: this can be found in the url path when viewing Responsible User details under global settings
  - `ResponsibleGroupId` string, uuid — The Unique Identifier of the Responsible Group. Note: this can be found in the url path when viewing Responsible Group details under global settings
  - `ConsentIntegration` boolean — Setting to fire the Data Subject Consent Updated integrations event. Note: we recommend using the `EnableNewConsentIntegration` setting to fire the Data Subject Profile Updated event instead
  - `EnableNewConsentIntegration` boolean — Setting to fire the Data Subject Profile Updated integrations event. Note: `ConsentIntegration` must be enabled (true) in order for `EnableNewConsentIntegration` to take effect. For more information see this [article](https://my.onetrust.com/s/article/UUID-58e8b9fb-0e47-5aca-713b-c2f26102d60c)
  - `IsAuthenticationRequired` boolean — Setting to require authentication for a collection point. For more information see this [article](https://my.onetrust.com/s/article/UUID-b359a104-1900-9ac9-7765-ee08c8047f1d?topicId=0TO3q000000kIUHGA2)
  - `ReconfirmActivePurpose` boolean — Used in conjunction with the double opt in feature. Will treat a returning data subject the same as a new one, and trigger the confirmation email event when re-consenting to the same purpose
  - `OverrideActivePurpose` boolean — Used in conjunction with the double opt in reconfirmation and purpose expiration features. This setting is enabled by default and can be turned off if it is desired for a purpose to remain in active status until expired if a data subject does not reconfirm their consent
  - `IsDynamicCollectionPoint` boolean — Whether this is a dynamic collection point or not. For more information see this [article](https://my.onetrust.com/s/article/UUID-358c7e03-1d60-ff3b-e443-25d4283c7ac3?topicId=0TO3q000000kIWXGA2)
  - `NewSdkIntegrationEnabled` boolean — Whether new sdk integration is enabled or not. SDK can be loaded in the <head> and a new script is no longer required for each form
  - `attributeValues` object — A map of attribute values associated with this Collection Point. This field allows for custom attributes to be attached to the Collection Point for additional metadata or integration purposes. The key represents the attribute name, and the value is a list of attribute value information objects.
  - `HostedWebForm` ConsentPreferencesUniversalConsentPreferenceManagHostedWebFormDto
    - `Id` string, uuid — Unique identifier for the hosted web form
    - `Name` string, required — Name of the hosted web form
    - `WebFormData` object, required — JSON configuration data for the web form
    - `BrandingData` object — Branding configuration for the web form
    - `SdkVersion` string, required — Version of the SDK used for the web form
    - `PublishedLink` string, uri — URL to access the published version of the web form
    - `DraftLink` string, uri — URL to access the draft version of the web form
    - `VersionId` string, uuid — Unique identifier for the current version of the hosted web form
    - `DefaultLanguageTranslations` object — Default language translations for the web form
    - `PortalData` ConsentPreferencesUniversalConsentPreferenceManagHostedWebFormPortalData
      - `DefaultLanguage` string, required — Default language code for the web form portal
      - `SelectedLanguage` string[] — Set of language codes that are selected/available in the web form portal
      - `CustomTranslations` object, required — Custom translations for the web form portal. Nested map structure where the first key is the language code and the inner map contains key-value pairs of translation keys and their values.
    - `TestScriptGuid` string, uuid — Unique identifier for the test embedded script
    - `ProdScriptGuid` string, uuid — Unique identifier for the production embedded script
    - `previewId` string, uuid — Unique identifier for the web form draft version
    - `TestPublishVersion` string — Version number of the last test publish
    - `ProdPublishVersion` string — Version number of the last production publish
    - `supportedScriptVersion` string[] — List of supported script versions for the web form.
    - `NewSelectedLanguages` string[] — List of newly selected languages for the web form
    - `IntegrationUrls` string[] — A list of External Organization Ids.
    - `IntegrationSettings` object — Configuration settings for various integrations
    - `formTemplate` string — Template identifier for web form customization
  - `PurposeIdsWithVersion` ConsentPreferencesUniversalConsentPreferenceManagIdVersionPairDto[] — A list containing the IDs of purposes along with their versions that this Collection Point is associated with. Each entry maps a purpose ID to a specific version.
    - `Id` string, uuid, required — The unique identifier of the entity
    - `Version` integer — The version of the entity
  - `includeIdentifierParameter` boolean — When enabled, includes the identifier parameter in the double opt-in (DOI) confirmation link. This is useful for passing the identifier through the DOI process.
  - `EnablePublishEvent` boolean — Setting to fire the Collection Point Published integrations event. For more information see this [article](https://my.onetrust.com/s/article/UUID-58e8b9fb-0e47-5aca-713b-c2f26102d60c)
  - `EnablePrimaryIdentifier` boolean — Setting to enable primary identifier functionality. When enabled, designates one of the identifiers as the primary identifier for the data subject.
  - `EnableCaptcha` boolean — When enabled, requires users to complete a CAPTCHA challenge before submitting the form. This helps prevent automated submissions and spam.
  - `PrimaryIdentifierType` string — The primary identifier type used to identify data subjects for this Collection Point. This is used when multiple identifier types are configured.
  - `CookieConsentUpdate` 'UPDATE_ALL' | 'SKIP_TRANSACTION' — Specifies how cookie consent updates should be handled for this Collection Point. This determines the behavior when consent preferences change.
  - `EnableGeolocation` boolean — When enabled, captures the data subject's geolocation (with their consent) for specific purposes. This feature is currently in preview.
  - `EnablePrefillIdentifier` boolean — When enabled, allows the Collection Point to pre-fill identifier fields when possible, improving user experience for returning visitors.
  - `EnableGeoLocationForDataElements` boolean — When enabled, captures the data subject's geolocation (with their consent) for specific data elements. This feature is currently in preview.
  - `RedirectOnFormSubmission` boolean — When enabled, automatically redirects users to a specified URL after they submit the form. The redirect URL can be configured separately.
  - `DisableReports` boolean — When set to true, disables all reporting for this Collection Point. This can be used to improve performance for high-volume Collection Points where reporting is not needed.
  - `ParentIdentifierTypes` string[] — List of parent data subject identifier types for this Collection Point. Used with Consent on Behalf and Multiple Data Subject Identifiers features.
  - `DOIEmailIdentifier` string — The email address to use when sending double opt-in confirmation emails. If not specified, the primary email identifier will be used.
  - `AckEmailIdentifier` string — The email address to use when sending acknowledgment emails. This can be different from the main contact email for the Collection Point.
  - `PrefillIdentifier` string — The identifier value to pre-fill in the form when known. This improves user experience by reducing data entry for returning visitors.
  - `enablePurposeEvent` boolean — When enabled, generates an event whenever a purpose-related action occurs through this Collection Point. Useful for triggering workflows or integrations.
  - `enableDataElementEvent` boolean — When enabled, generates an event whenever a data element-related action occurs through this Collection Point. Useful for triggering workflows or integrations.
  - `enableCustomPreferenceEvent` boolean — When enabled, generates an event for custom preference changes made through this Collection Point. Useful for triggering workflows or integrations.
  - `Status` 'DRAFT' | 'ACTIVE' | 'RETIRED' | 'INACTIVE' | 'ACTIVE' | 'INACTIVE' | 'DRAFT' | 'ARCHIVED', required — The current status of the Collection Point. This field determines whether the Collection Point is active, inactive, or in another state. Only active Collection Points will be served to end users.
  - `PreferenceCenterSettings` object — A key-value map containing all Preference Center settings for this Collection Point. These settings control the appearance and behavior of the Preference Center associated with this Collection Point. The structure of this object depends on the specific configuration of the Preference Center.
  - `PortalSettings` object — A key-value map containing all Portal settings for this Collection Point. These settings control the appearance and behavior of the Privacy Portal associated with this Collection Point. The structure of this object depends on the specific configuration of the Portal.
  - `LastSdkIntegrationDate` string, date-time — The timestamp when the SDK integration was last synchronized with this Collection Point. This field is automatically updated by the system when changes are made to the Collection Point that require SDK updates. It should not be set manually.
  - `Notices` ConsentPreferencesUniversalConsentPreferenceManagCollectionPointNoticeCreateDto[] — The set of notices associated with this Collection Point. Notices define the privacy notices and consent requests that will be displayed to users. Each notice can be configured with different purposes, data categories, and consent requirements.
    - `name` string — Name of the collection point notice
    - `url` string — URL associated with the notice
    - `privacyNoticeGuid` string, uuid — Unique identifier of the privacy notice
    - `type` 'LINKED' | 'EMBEDDED', required — Type of the collection point notice
    - `purposeId` string, uuid — Deprecated: Use purposeIds instead. Single purpose ID associated with the notice
    - `purposeIds` string[] — Set of purpose IDs associated with the notice
    - `noticeType` 'PRIVACY_NOTICE' | 'DIGITAL_POLICY', required — Type of notice being created
  - `HostedWebformPublish` boolean — Flag indicating whether to publish the hosted webform for this Collection Point. When set to `true`, the webform will be published and made available at the configured URL. When set to `false`, the webform will be unpublished but the configuration will be saved. Note: This field is only applicable for Collection Points with `collectionPointType` set to `HOSTED_WEB_FORM`.
  - `doubleOptInExcludedPurposes` ConsentPreferencesUniversalConsentPreferenceManagDoubleOptInExcludedPurposes[] — List of purposes that should be excluded from the Double Opt-In (DOI) requirement. When a purpose is in this list, users will not be required to confirm their consent via email for that specific purpose, even if DOI is enabled for the Collection Point.
    - `purposeGuid` string, uuid, required — Unique identifier of the purpose
    - `excludeFromDoubleOptIn` boolean, required — Flag indicating whether the purpose should be excluded from double opt-in requirements
  - `doNotActivateWebform` boolean, required — When set to `true`, prevents the embedded webform from being automatically activated. This is useful when you want to configure the webform but activate it at a later time. The webform will remain in a draft state until explicitly activated.

## Response `200`

OK

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `429` — Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500` — Internal Server Error

---

[API](https://skmtc.net/onetrust/apis/platform-access-management.md) · [All operations](https://skmtc.net/onetrust/apis/platform-access-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/onetrust/platform-access-management/versions/21de3aa0b170/schema)