The IAB TCF (Transparency & Consent Framework) is an industry standard, created by IAB Europe, for collecting, recording, and communicating user consent across the digital advertising supply chain. It defines a common way for consent management platforms, publishers, and ad-tech vendors to signal what a user has agreed to, primarily through a standardized consent string, so that data flows in line with the GDPR and the ePrivacy Directive.
The TCF exists because online advertising involves dozens of vendors per page. The framework gives them all one shared language for consent.
How does the IAB TCF work?
The TCF standardizes consent across four moving parts:
- CMP: a registered consent management platform collects user choices and is assigned a unique CMP ID
- Purposes: a fixed list of data-processing purposes (e.g., "store information on a device," "personalized ads") users consent to
- Vendors: the Global Vendor List (GVL) of ad-tech companies a user can allow or reject
- Consent string: an encoded record (the "TC string") that captures the user's choices and travels through the ad auction
When a user makes choices on a TCF banner, the CMP encodes them into a consent string that downstream vendors read before processing data.
What is TCF v2.2?
TCF v2.2 is the current major version of the framework. It tightened transparency requirements — including clearer purpose descriptions, removal of "legitimate interest" as a basis for advertising purposes, and standardized disclosures of vendor counts. Publishers using the TCF must keep their CMP updated to the active version to remain compliant.
Do you need the IAB TCF?
The TCF is most relevant if you sell programmatic advertising or work with the ad-tech ecosystem (Google's ad products support TCF signals). Many sites that simply run analytics and first-party marketing can collect compliant consent without registering as a TCF CMP.
Enzuzo's consent management platform (CMP) helps businesses collect and document GDPR- and CCPA-valid consent.
Frequently asked questions
What does IAB TCF stand for? IAB TCF stands for the Interactive Advertising Bureau's Transparency & Consent Framework — an industry standard for managing user consent in digital advertising.
What is a TCF consent string? A TCF consent string (TC string) is an encoded text record of a user's consent choices — which purposes and vendors they allowed — that is passed through the advertising supply chain so each vendor knows what's permitted.
Is the IAB TCF legally required? No. The TCF is a voluntary industry standard, not a law. It is a way to operationalize GDPR consent for advertising, but you can be GDPR-compliant without using it.
Collect compliant advertising consent
See how Enzuzo manages consent for advertising and analytics →