Publisher restriction
When an IAB vendor registers with the IAB Transparency and Consent Framework (TCF), they declare the purposes, special purposes, features, and special features for which they process data and the legal basis (consent or legitimate interest) used to process that data. These declarations are recorded in the IAB TCF Global Vendor List (GVL).
Despite these declarations, your organization can utilize publisher restriction to override certain aspects of what is recorded in the GVL for the IAB vendor and alter the vendor's behavior on your property. In this article, we will cover:
Note: Due to the TCF v2 technical specifications, publisher restrictions can be large and will increase the size of your euconsent-v2 cookie. In some cases, the cookie will be too large for a browser, which generally has a 4096 byte limit.
As a result, the browser may be unable to store the cookie and TCF v2 will not work properly (this explains why you could encounter errors related to publisher restrictions in your browser console).
Publisher restriction overview
In the table below, review the possible restrictions your organization can place on an IAB vendor associated with your IAB TCF consent notice:
The following publisher restrictions are not available for every declaration made by an IAB vendor. Please see Publisher restriction rules for more information.
Allow purpose for selected vendors only
Allow the selected vendors to process data for the specified purpose
Do not allow purpose for selected vendors
Do not allow the selected vendors to process data for the specified purpose
Require consent for selected vendors
Only allow the selected purpose to be processed with consent as a legal basis for the specified vendor(s)
Require legitimate interest for selected vendors
Only allow the selected purpose to be processed with legitimate interest as a legal basis for the specified vendor(s)
Publisher restriction rules
When configuring publisher restrictions, your organization will want to keep the following rules in mind:
Purposes
For Purpose 1: Store and/or access information on a device, there are no publisher restrictions available
For Purpose 3-6, which are listed in order as:
Purpose 3: Create profiles for personalised advertising
Purpose 4: Use profiles to select personalised advertising
Purpose 5: Create profiles to personalise content
Purpose 6: Use profiles to select personalised content
declared legal basis for these purposes will always be consent. Your organization can only apply the following restrictions:
Allow purpose for selected vendors only
Do not allow purpose for selected vendors
Special Purposes
No publisher restrictions are available for vendor special purposes
Features
No publisher restrictions are available for vendor features
Special Features
Declared legal basis for special features (always consent) cannot be restricted. Your organization can only apply the following restrictions:
Allow purpose for selected vendors only
Do not allow purpose for selected vendors
Configure publisher restrictions
Mobile Applications
If you wish to use publisher restrictions on a Mobile application, please update your SDK to at least:
1.25.0 (Android)
1.37.0 (iOS)
In order to configure a publisher restriction, click Consent notices on the left-hand panel and then select your consent notice that utilizes the IAB TCF framework.

Ensure the Regulations tab and Regulations sub-tab are selected and click Edit Vendors & Purposes inline with GDPR.

Navigate to the TCF settings section on the subsequent page and click Add restriction.

Use the provided Purpose field in the modal to select a purpose/special feature for which you are implementing the restriction.

Once a purpose is selected, select the vendor(s) to which the restriction on the purpose will be applied.

With the purpose and specified vendors configured, use the provided toggles to select the restriction your organization wishes to implement.
Refer to the publisher restriction rules for the available options for each purpose, special purpose, feature, and special feature.
Click Save when finished.

All configured publisher restrictions will be listed in the IAB TCF Publisher Restrictions accordion of the TCF settings section.

Last updated