{"page":"/blog/gdpr-eprivacy-bidstream-tcf","modified":"2026-10-18","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Version","Launched","Mandatory","Main changes","Source"],"rows":[["v2.2","16 May 2023","20 November 2023","Legitimate interest removed for purposes 3 to 6; plain-language purpose texts; vendors declare data categories and retention; CMP must show total vendor count on first layer; easy withdrawal; GVL v3; getTCData deprecated","IAB Europe"],["v2.3","April 2025","28 February 2026","Disclosed Vendors segment mandatory in every TC String; resolves ambiguity for vendors that declare only special purposes","IAB Europe; IAB Tech Lab string spec"]],"sourceUrls":[["https://iabeurope.eu/tcf-2-2/"],["https://iabeurope.eu/transparency-consent-framework/","https://raw.githubusercontent.com/InteractiveAdvertisingBureau/GDPR-Transparency-and-Consent-Framework/master/TCFv2/IAB%20Tech%20Lab%20-%20Consent%20string%20and%20vendor%20list%20formats%20v2.md"]]}