For the complete documentation index, see llms.txt. This page is also available as Markdown.

Publisher restriction

When an IAB vendor registers with the IAB Transparency and Consent Framework (TCF), they declare the purposes, special purposes, features, and special features for which they process data and the legal basis (consent or legitimate interest) used to process that data. These declarations are recorded in the IAB TCF Global Vendor List (GVL).

Despite these declarations, your organization can utilize publisher restriction to override certain aspects of what is recorded in the GVL for the IAB vendor and alter the vendor's behavior on your property. In this article, we will cover:


Publisher restriction overview

In the table below, review the possible restrictions your organization can place on an IAB vendor associated with your IAB TCF consent notice:

The following publisher restrictions are not available for every declaration made by an IAB vendor. Please see Publisher restriction rules for more information.

Restriction
Description

Allow purpose for selected vendors only

Allow the selected vendors to process data for the specified purpose

Do not allow purpose for selected vendors

Do not allow the selected vendors to process data for the specified purpose

Require consent for selected vendors

Only allow the selected purpose to be processed with consent as a legal basis for the specified vendor(s)

Require legitimate interest for selected vendors

Only allow the selected purpose to be processed with legitimate interest as a legal basis for the specified vendor(s)

Publisher restriction rules

When configuring publisher restrictions, your organization will want to keep the following rules in mind:

Purposes

For Purpose 1: Store and/or access information on a device, there are no publisher restrictions available

For Purpose 3-6, which are listed in order as:

  • Purpose 3: Create profiles for personalised advertising

  • Purpose 4: Use profiles to select personalised advertising

  • Purpose 5: Create profiles to personalise content

  • Purpose 6: Use profiles to select personalised content

declared legal basis for these purposes will always be consent. Your organization can only apply the following restrictions:

  • Allow purpose for selected vendors only

  • Do not allow purpose for selected vendors

Special Purposes

No publisher restrictions are available for vendor special purposes

Features

No publisher restrictions are available for vendor features

Special Features

Declared legal basis for special features (always consent) cannot be restricted. Your organization can only apply the following restrictions:

  • Allow purpose for selected vendors only

  • Do not allow purpose for selected vendors

Configure publisher restrictions

Mobile Applications

If you wish to use publisher restrictions on a Mobile application, please update your SDK to at least:

  • 1.25.0 (Android)

  • 1.37.0 (iOS)

In order to configure a publisher restriction, click Consent notices on the left-hand panel and then select your consent notice that utilizes the IAB TCF framework.

Ensure the Regulations tab and Regulations sub-tab are selected and click Edit Vendors & Purposes inline with GDPR.

Navigate to the TCF settings section on the subsequent page and click Add restriction.

Use the provided Purpose field in the modal to select a purpose/special feature for which you are implementing the restriction.

Once a purpose is selected, select the vendor(s) to which the restriction on the purpose will be applied.

With the purpose and specified vendors configured, use the provided toggles to select the restriction your organization wishes to implement.

Refer to the publisher restriction rules for the available options for each purpose, special purpose, feature, and special feature.

Click Save when finished.

All configured publisher restrictions will be listed in the IAB TCF Publisher Restrictions accordion of the TCF settings section.

Last updated