Home / IAB TCF

IAB TCF Compliance

The IAB Transparency & Consent Framework (TCF) was developed by IAB Europe to standardize how user preferences and data processing information are managed across the digital advertising ecosystem. Easily implement TCF v2.4 with Okito and configure your consent management in line with the latest standards.

Get Started TCF v2.4
Powering we provide the latest solutions for website privacy compliance
garcia.png
suaryapi.png
blackstate.png
gulbenergen.png
reportage.png
sulax.png (1)
barbertrade.png
naksanyapi.png
byonhotels.png
atlastek.png
nexonya.png
uiduk.png
endemik.png
scotty.png
pehlivan.png
mintek.png
ader.png

Create Your Okito Account

Add your website, choose the plan that fits your needs, and begin configuring TCF v2.4 from the Okito dashboard.

Create Your Okito Account

Copy Your Banner Code

Configure your banner design, data processing purposes, and vendors. Then copy the code generated specifically for your website.

Copy Your Banner Code

Add the Code to Your Website

Place the code in your website’s <head> section or deploy it through Google Tag Manager. Publish your banner and start managing user preferences according to the TCF standard.

Add the Code to Your Website

Configure Your TCF v2.4 Consent Experience

A TCF interface should present the right information in a clear and easy-to-follow order. Okito helps you configure this experience in line with the latest technical and interface requirements of TCF v2.4.

  • Enable TCF v2.4 settings through a guided setup.

  • Configure data processing purposes, features, and disclosures related to Special Feature 2.

  • Customize the layout, colors, and CSS to match your brand while preserving the required TCF information.

Give Users Clear and Flexible Choices

Visitors should be able to understand which purposes and vendors may process their data before making a choice. They should also be able to update their preferences or withdraw consent after their initial selection.

  • Present accept, reject, and granular preference options in a clear and balanced way.

  • Keep the preference center or banner recall button easily accessible.

  • Display the appropriate consent experience based on the user’s location.

  • Clearly explain the scope of preferences in supported multi-device environments.

Manage Vendors and Communicate Consent Signals

User choices should not remain limited to the banner; they must be communicated to the relevant vendors through a standardized mechanism. Okito helps present vendor information clearly and transmit consent signals consistently across the digital advertising ecosystem.

  • Manage vendors from the IAB Global Vendor List and eligible Google Ad Tech Providers.

  • Display each vendor’s data processing purposes and relevant disclosures.

  • Let users make granular choices by vendor and purpose.

  • Transmit preferences through the standardized TC String and configure Google Additional Consent support where required.

What is IAB Europe?

IAB Europe is the European-level industry association for the digital marketing and advertising ecosystem. Through its network of national IABs and media, technology, and marketing companies, it represents more than 5,500 organizations and develops shared standards and technical frameworks.

The Transparency & Consent Framework (TCF), managed by IAB Europe, creates a common language for communicating user preferences among publishers, CMPs, and ad tech providers. Consent, objection, and vendor disclosure signals collected through a CMP or cookie banner are encoded in a standardized TC String.

IAB TCF does not replace the GDPR or the ePrivacy Directive. Every organization using the framework remains responsible for ensuring that its own data processing activities comply with applicable law.

What Is IAB TCF v2.4?

IAB TCF v2.4 is the current technical standard that defines how consent, objections, data processing purposes, and vendor disclosure signals are communicated through the TC String across the digital advertising ecosystem.

The first version of TCF launched on April 25, 2018. TCF v2.3, released on June 19, 2025, made the Disclosed Vendors segment mandatory to include vendor disclosure information in the TC String. TCF v2.4 specifications and the revised Global Vendor List followed on July 23, 2026.

The main changes introduced with TCF v2.4 include:

  • In supported implementations, user preferences can be managed across different access points to the same service, such as its website and mobile app.

  • The cookie banner must clearly state whether a choice has service-specific, group-specific, or multi-device scope.

  • Features must be presented with standardized explanations and illustrations, while Features that users cannot disable must not appear alongside misleading controls.

  • Special Feature 2 has been renamed “Identify devices based on information actively requested” and requires a separate user opt-in.

CMPs participating in IAB TCF must implement the new disclosures in web environments by October 23, 2026, and in mobile app and CTV environments by February 23, 2027.

Why Does IAB TCF v2.4 Matter for Publishers and CMPs?

Clear User Choices in the Cookie Banner

TCF v2.4 helps users make informed decisions by allowing them to review data processing purposes and relevant vendors through the cookie banner.

Users can give consent, set detailed preferences, object to processing based on legitimate interest, or withdraw consent they previously provided.

The banner clearly indicates whether a choice applies only to the current service or across supported devices and environments belonging to the same service. Users can also access the preference center to update their choices at any time.

CMP and TC String Management with TCF v2.4

A CMP that supports TCF v2.4 processes the disclosures in the updated Global Vendor List and encodes user preferences in a TC String that follows the latest technical specification.

The interface clearly distinguishes between Purposes and Special Features that users can control and Features that are displayed for information only.

The accuracy of the signals contained in the TC String depends on whether the CMP configuration matches the website’s actual cookies, vendors, and data processing activities.

Consistent Consent Signals for Advertising Platforms

Ad tech providers receive user choice, purpose, and vendor signals through the TC String. Under TCF, consent is required to create profiles for personalised advertising and select ads based on those profiles.

Without the required consent, these activities cannot be signalled as permitted, and platforms may serve limited or non-personalised ads according to their own rules.

An up-to-date TCF v2.4 setup helps reduce issues caused by missing or misinterpreted consent signals, but it does not guarantee advertising revenue or legal compliance.

FAQ

Frequently Asked Questions

IAB TCF stands for the IAB Europe Transparency & Consent Framework. It provides a common standard through which publishers, CMPs and advertising technology vendors can communicate users’ consent, objection and privacy choices.

A Consent Management Platform (CMP) is a software solution that informs users about data processing and enables them to accept, reject or customise their consent choices. Within the TCF, a CMP records these preferences and communicates them to publishers and participating vendors.

A CMP presents the relevant processing purposes and vendors, collects the user’s choices and encodes them in a standardised Transparency and Consent String, known as a TC String. This allows publishers and advertising technology vendors to receive and interpret consent or objection signals consistently.

IAB TCF is a voluntary industry standard rather than a law, and it does not replace GDPR compliance or applicable ePrivacy requirements. However, publishers using certain advertising platforms may be required to use a TCF-integrated CMP to preserve personalised advertising and measurement capabilities in regulated markets.

The IAB Global Vendor List is the official registry of advertising technology vendors participating in the TCF. It provides CMPs with each vendor’s declared purposes, features, legal bases and processing disclosures so that accurate information can be presented through the cookie consent banner.

IAB TCF v2.4 introduces clearer disclosures for multi-device consent, standard explanations and illustrations for Features, and safeguards against presenting Features beside controls users cannot disable. It also renames Special Feature 2 to “Identify devices based on information actively requested.” The official TCF v2.4 implementation timeline sets deadlines of 23 October 2026 for web environments and 23 February 2027 for mobile app and CTV environments.

Use a TCF-registered Consent Management Platform, accurately configure the vendors, purposes, features and legal bases used by your service, and implement the disclosures required by v2.4. Users must also receive clear choices and an accessible way to change or withdraw consent, while the organisation remains responsible for meeting applicable GDPR requirements.

Google’s Additional Consent Mode works alongside IAB TCF to communicate consent for eligible Google Ad Tech Providers that are not registered on the Global Vendor List. It produces a separate Additional Consent signal and should not be confused with Google Consent Mode v2, which controls how Google tags behave according to user consent.

Yes. Okito is an IAB Europe-registered CMP that supports IAB TCF v2.4. You can find OKITO LTD in the official IAB CMP List under CMP ID 508, approved for Web and Native App (Mobile) environments.