The IAB Transparency and Consent Framework

Almost certainly not, unless you are a publisher selling advertising inventory programmatically through vendors that require it. It is an industry framework rather than a law, and adopting it adds a vendor list and a taxonomy to your banner without making an ordinary website any more compliant.

No. No EU regulation requires the framework. It is administered by IAB Europe, a trade association, and participation is a commercial decision driven by what your advertising partners ask for rather than by what the law asks for.

The Court of Justice held that the TC String, the encoded record of a visitor’s choices, is personal data, and that IAB Europe acts as a joint controller in respect of it. That gives adopting the framework its own data protection consequences, which is worth weighing before treating it as a way to reduce risk.

Ask us about your specific setup rather than assuming either way, because registration is a formal status and we would rather answer precisely than list a badge here. What we can state plainly is what we do support: GDPR and ePrivacy consent directly, and Google Consent Mode v2 as a Google Certified CMP Partner.

No single tool can, and any vendor saying otherwise is selling you something. Consent Studio handles the part a consent platform can handle: asking properly, holding every tag to the answer, keeping the record, and telling you when the site changes. What you process elsewhere is yours.

In Amsterdam, on infrastructure owned and operated by Scaleway, a French company. Ownership matters more than location here: Scaleway is independently French rather than a European subsidiary of a US parent, so neither they nor we fall under the US CLOUD Act. Consent Studio itself is built and owned in the Netherlands.