IAB Europe to Appeal Belgian DPA GDPR Consent Ruling

IAB Europe has confirmed it will appeal the Belgian Data Protection Authority's (DPA) administrative ruling against its Transparency & Consent Framework (TCF) to the Belgian Market Court. The Belgian DPA found the TCF, which manages user consent for personalized advertising, violates several provisions of the GDPR and determined that IAB Europe acts as a joint controller for profiling and other data processing by TCF vendors in the context of OpenRTB real-time bidding. The DPA said information provided through Consent Management Platform interfaces is too generic and vague for users to maintain control over their personal data, and that the TCF lacks organizational and technical measures for data protection by design. IAB Europe CEO Townsend Feehan called the ruling a misunderstanding of the facts and a misapplication of the law. The DPA did not order IAB Europe to discontinue use of the TCF while it submits a compliance plan.