IAB TCF 2.4 Policy Checklist & Custom Text Requirements

OneTrust is a certified Consent Management Provider for the IAB TCF 2.4 framework. The IAB has strict requirements for the TCF 2.4 User Interface (UI) to be compliant with the Framework. While the Cookie Consent application provides the IAB TCF 2.4 template, which has added safeguards to ensure your implementation meets all TCF requirements, it is still possible for the implementation to miss the mark on some essential checks. Our policy checks are designed to:

  • Support your review of our TCF templates, showing how they are aligned with the TCF v2.4. requirements.

  • Help you ensure that your UI meets all the IAB TCF 2.4 requirements if you decide to perform customizations.

CAUTION:

Within the TCF, there is specific text required to be shown to site visitors concerning the purposes of processing and how site visitors may exercise their rights. While we do allow some editing of various content and settings, we require that you do so within the requirements of the TCF. For more information, see IAB TCF 2.4 Policies.

  • You must abide by the IAB user interface terms and conditions.

  • OneTrust recommends using the standard IAB Europe-approved notice descriptions included in the IAB TCF template. These descriptions are regularly updated to reflect any changes in the IAB TCF policy.

  • If you choose to create custom text to replace the standard IAB Europe-approved notice description in either the first or second layer, any modifications must comply with TCF standards. To ensure compliance with IAB TCF policies, this article details the steps required to review and address requirements of disclosures for the first layer (Banner), and second layer (Preference Center) of the CMP. If you plan to customize the text, please contact your OneTrust implementation consultant or reach out to OneTrust Support via the Create a Case web form.

  • Breaking these standards could be cause for OneTrust to disable your CMP solution.

  • If you wish to customize to the point of non-compliance, you will be asked to register your own CMP ID with the IAB as per policy guidelines.

  • Learn more about the Transparency and Consent Framework.