Transparency and Consent Framework (TCF)

De facto industry standard for GDPR consent management in European programmatic advertising, maintained by IAB Europe

The Transparency and Consent Framework (TCF) is an industry-wide technical standard developed and maintained by IAB Europe, designed to help publishers, advertisers, ad tech vendors, and agencies comply with the EU's General Data Protection Regulation (GDPR) and the ePrivacy Directive. The framework provides a standardized mechanism for collecting, recording, and communicating user consent and legitimate interest signals across the programmatic advertising ecosystem, enabling all parties in the supply chain to understand and respect user privacy preferences. The TCF operates through a consent string — a compact, encoded data structure that captures a user's privacy choices and is passed through the bidstream alongside ad requests. Vendors registered on the IAB Europe Global Vendor List (GVL) can declare their data processing purposes, and Consent Management Platforms (CMPs) certified under the framework are responsible for surfacing consent UIs to users and generating the consent string. Version 2.2, the current iteration, introduced refinements around legitimate interest claims and purpose-based consent signaling. The TCF holds a dominant position in European digital advertising compliance infrastructure, with hundreds of certified CMPs and thousands of registered vendors. However, it has faced significant regulatory scrutiny: in February 2022, the Belgian Data Protection Authority ruled that the TCF as implemented violated GDPR, prompting IAB Europe to develop and implement an action plan. Despite ongoing legal and regulatory challenges, the TCF remains the de facto standard for consent management in European programmatic advertising, making it a critical piece of AdTech compliance infrastructure.