Your CMP's Vendor List Is 800 Names Long. Nobody Reads It.

Open any major publisher's consent banner and count the vendors. Eight hundred is a normal number, and nobody has ever read all eight hundred. The list is transparency theater, and the tool that fixes it is already in the framework: publisher restrictions.

Why the list is that long

The IAB's Global Vendor List, the GVL, registers every vendor that participates in the Transparency and Consent Framework, and a consent management platform surfaces the ones relevant to the publisher's setup. A publisher running programmatic advertising inherits the vendors its supply partners use, and the list grows with every partner, every header bidding wrapper, and every analytics tool. Eight hundred names is not a sign of a broken setup. It is a sign of an uncurated one.

TCF v2.2 made the count visible by requiring CMPs to display the total number of vendors seeking data access on the first screen. That was a transparency improvement, and it had an unintended effect: users see a number like 800 and either click Accept to make it go away or leave the site. A list that long does not inform consent. It exhausts it, and exhausted users do not make the choices the framework was built to protect.

The vendors themselves are not the problem. Most of them are legitimate ad tech companies with real purposes and real data practices. The problem is that the publisher has never decided which of them it actually needs, and the default is to surface all of them rather than the ones that matter.

What publisher restrictions do

Publisher restrictions let a publisher limit which vendors can process data for which purposes on its properties, overriding the vendor's own registration. A publisher that only works with 40 vendors can restrict the rest, and the CMP will surface the restricted list instead of the full GVL. The restriction is set at the publisher level, applies across the publisher's properties, and is encoded in the TC string, so downstream vendors see the restriction and respect it. Related reading: Cookiebot Alternatives Compared Side by Side.

The practical effect is a shorter list and a faster decision. A banner showing 40 vendors with clear purpose descriptions is a consent interface a user can actually engage with. A banner showing 800 is a wall. The restriction also reduces the publisher's exposure, because every vendor on the list is a processor the publisher is accountable for, and a vendor the publisher has never heard of is a vendor it cannot vet.

Setting restrictions takes an afternoon. List the vendors your supply partners actually use, check which purposes each one needs, restrict the rest, and test the banner to confirm the count dropped and the ads still serve. Then repeat the audit quarterly, because supply partners add vendors without telling you, and the list creeps back up if nobody watches it.

The test that tells you it worked

Count the vendors on the first layer before and after, and measure the consent rate and the time to decision. A shorter list should raise the rate of users who make an active choice rather than clicking Accept to dismiss the wall, and it should reduce the time they spend staring at it. If the consent rate falls, the restriction cut a vendor the business actually needed, and the fix is to add that vendor back, not to restore the full 800. More on this: The Cookie Scan Found 12 Trackers. The Page Loads 31..

Frequently asked questions

Can I cut vendors from the list?

Yes. Publisher restrictions let you limit which vendors can process data for which purposes on your properties, and the CMP surfaces the restricted list.

What is a publisher restriction?

A publisher-level override on purposes and vendors, encoded in the TC string. It tells downstream vendors which processing the publisher allows.

Does the count include all vendors or only mine?

The CMP surfaces the vendors registered in the Global Vendor List that are relevant to your setup. Restrictions narrow that to the vendors you actually work with.

Will restricting vendors hurt ad revenue?

It can, if you restrict a vendor your supply partners need. Audit first, restrict the vendors you do not use, and measure revenue before and after.