In May 2023 The Interactive Advertising Bureau (IAB) announced the latest version of its Transparency and Consent Framework (TCF), or TCF v2.2, which must be implemented by all consent management platforms (CMPs) by November 20, 2023.
Below is a summary of all the changes from TCF v2.0 to the latest TCF v2.2
- Legitimate interest can no longer be selected as a legal basis for advertising and content personalization (purposes 3, 4, 5 and 6).
We will remove the option to select legitimate interest for these purposes. For purposes 3, 4, 5 and 6, you as a publisher must obtain consent for the vendors to process the data.
- A new purpose, purpose 11, will be added. This purpose is: "Use limited data to select content". This purpose is included in stack 43: "Content can be selected based on limited data. Content performance can be measured". More information on purpose 11 and stack 43 can be found in the IAB Europe TCF Policies.
Cookiebot CMP can display this purpose and enable you to use limited data to select content if the vendors choose this specific purpose. We provide flexibility to choose the legal basis: consent or legitimate interest.
- There will be a new Global Vendor List, GVL v3. When you migrate to TCF v2.2, you will automatically migrate to the GVL 3 too.
User Interface Changes
- Cookiebot CMP will display the total number of vendors (IAB and non-IAB vendors) in the text on the first layer.
- New information added by the vendors will be disclosed to the end users. In the 'Ad settings' section, we will add the following information:
- Categories of data collected
- Retention periods on a per-purpose basis
- Link to more information on legitimate interest(s) - where applicable
- An opt-in and opt-out option need to be provided on all CMPs. Cookiebot CMP already provides both of these options.