In May 2023 The Interactive Advertising Bureau (IAB) announced the latest version of its Transparency and Consent Framework (TCF), or TCF v2.2, which must be implemented by all Consent Management Platforms (CMPs) by November 20, 2023.
Below is a summary of all the changes from TCF version 2.0 to the latest TCF version 2.2.
- Legitimate interest can no longer be selected as a legal basis for advertising and content personalization (purposes 3, 4, 5 and 6).
We will remove the option to select legitimate interest for these purposes. For purposes 3, 4, 5 and 6, you as a publisher must obtain consent for the vendors to process the data.
- A new purpose, purpose 11, will be added. This purpose is: "Use limited data to select content". This purpose is included in stack 43: "Content can be selected based on limited data. Content performance can be measured". More information on purpose 11 and stack 43 can be found in the IAB Europe TCF Policies.
Cookiebot CMP can display this purpose and enable you to use limited data to select content if the vendors choose this specific purpose. We provide flexibility to choose the legal basis: consent or legitimate interest.
- There will be a new Global Vendor List (GVL), version 3. When you migrate to TCF version 2.2, you will automatically migrate to version 3 of the GVL too.
User Interface Changes
- Cookiebot CMP will display the total number of vendors (IAB and non-IAB vendors) in the text on the first layer.
New information added by the vendors will be disclosed to the end users. In the 'Ad settings' section, we will add the following information:
- Categories of data collected
- Retention periods on a per-purpose basis
- Link to more information on legitimate interest(s) - where applicable
- An opt-in and opt-out option need to be provided on all CMPs. Cookiebot CMP already provides both of these options.