Fides 2.50.0 release notes

• 2.50.0: November 25, 2024

Helios

Detect and classify global data risks with comprehensive visualization for data mapping and reporting for modern Enterprise.

• Added namespace support for Snowflake, making it easier to use datasets created by Helios for privacy request automation in Fides.
• Improved datamap functionality with lazy loading of dataset relationship properties for reports, enhancing performance and usability.
• Disabled undeclared data categories for datamap CSV exports to improve export speed.
• Subfields now include a top_level_field_name property, improving field organization and classification.
• Added timeout handling for asynchronous discovery monitor queries, preventing UI freezing during long-running processes.
• Updated task worker configurations by disabling connection pooling, adding retries, and keep-alive settings to enhance database connection reliability.
• Resolved incorrect display names for some resources in the Data Detection & Discovery tables.
• Fixed issues with subfields not properly leaving classification, preventing inconsistent behaviors.

Janus

High performance consent recording and orchestration for data sharing, built for enterprise data engineering and AI pipelines.

• Added a loading state to toggle switches on the Privacy Experience page for better user feedback during updates.
• New environment variable allows the Fides Privacy Center to be scoped to a specific property so that multiple privacy centers can support property-based consent configurations.
• Enhanced support for custom paths in the Privacy Center, ensuring correct privacy experiences are fetched.
• Improved CMP behavior by ensuring the override fides_privacy_policy_url applies regardless of language settings.
• Fixed a missing label option for the "Manage privacy preferences" button in TCF experience translations.

The Janus Javascript CMP has been updated to use the latest version of the core IAB library that provides GPP functionality. The latest version of the IAB library includes a notable change to the GPP API. Previous versions of the core IAB javascript library appended a version number such as v1 to each section returned from the API. These suffixes were recently removed from the latest version of the IAB library and have been incorporated into the Fides CMP.

In previous versions of Fides, the GPP API would return section information as follows:

{
  "gppVersion": "1.1",
  "cmpStatus": "loaded",
  "cmpDisplayStatus": "hidden",
  "signalStatus": "ready",
  "supportedAPIs": [
    "7:usnatv1”,
    "8:uscav1",
    "10:uscov1",
    "12:usctv1",
    "11:usutv1",
    "9:usvav1"
  ],
  "cmpId": 407,
  "sectionList": [
    7
  ],
  "applicableSections": [
    7
  ],
  "gppString": "DBABLA~BVAUAAAAAWA.QA",
  "parsedSections": {
    "usnatv1": {
     ...
    }
  }
}

In version 2.50 of Fides, the GPP API now returns the same section information in this format:

{
  "gppVersion": "1.1",
  "cmpStatus": "loaded",
  "cmpDisplayStatus": "hidden",
  "signalStatus": "ready",
  "supportedAPIs": [
    "7:usnat",
    "8:usca",
    "10:usco",
    "12:usct",
    "11:usut",
    "9:usva"
  ],
  "cmpId": 407,
  "sectionList": [
    7
  ],
  "applicableSections": [
    7
  ],
  "gppString": "DBABLA~BVAoAAAAAWA.QA",
  "parsedSections": {
    "usnat": {
      ...
  }
}

Based on testing, these updates are well supported by the advertising ecosystem. Reach out to Ethyca support if you have questions.

Lethe

Enterprise grade privacy request management and processing with a single orchestration layer for DSRs across vendors and systems

• Added MD5 email hashing support for Segment's erasure requests.
• Separated out Segment integration to Segment and Segement Unity.
• Corrected the position of the "Integration" button on the system detail page for better UI consistency.
• Resolved bugs related to privacy request emails not being sent for requests with custom identities.
• Introduced field-level masking overrides, enabling granular control over sensitive data visibility in third party SaaS integrations.
• Enhanced logging for privacy requests to provide more visibility into request handling.

Fides core

• Security Update: Password policy is now enforced on the Accept Invite API, addressing CVE-2024-52008.
• Migrated several Chakra Select components to Ant Design, aligning with the new design system.
• Fixed extra delete icons appearing on the Domains page.