Update on IAB Transparency & Consent Framework

The Interactive Advertising Bureau (IAB) is responding to the recent judgement of the Court of Justice of the European Union (CJEU), which states that TC strings may be considered personal data under certain conditions. The Transparency & Consent Framework (TCF) Steering Group has endorsed a new version of the framework to help the online marketing industry comply with the ePrivacy Directive and GDPR.

Here’s what you need to know:

IAB action plan
This update is part of an action plan validated by the Belgian Data Protection Authority, addressing the need for a legal basis for TC strings.

Introduction of Special Purpose 3 (“Save and communicate privacy choices”)
Special Purpose 3 covers the processing of the TC string based on legitimate interest. Vendors should conduct a legitimate interest assessment (LIA).

New UI requirements for CMPs
The CMP’s 2nd layer must provide information about the processing of the consent signal and the maximum storage duration on the device.

Deadlines
Vendors need to update their registration by July 3,2024.
CMPs need to comply with the changes by October 4, 2024.

Please contact us for further information and support with the legitimate interest assessment (LIA).