From the article:<p>> IAB Europe argued that it is not responsible under the GDPR as a “data controller” because it allegedly only sets the rules for how data should be used, but does not process the data itself. The Court rightly rejected this, and confirmed that IAB Europe, as management body for the TCF, is a “data controller” under the GDPR.<p>IAB stands for Interactive Advertising Bureau Europe [0]<p>[0] <a href="https://www.eesc.europa.eu/en/policies/policy-areas/enterprise/database-self-and-co-regulation-initiatives/46" rel="nofollow">https://www.eesc.europa.eu/en/policies/policy-areas/enterpri...</a>