Does the TCF demand that user consent be obtained every time the Global Vendor List is changed? 

Every time the user is shown the privacy banner e.g. on the first visit to the website or when the user wishes to change his or her personal privacy settings, the TCF 2.0 requires that this occurs based on the newest version of the Global Vendor List (GLV).

The TCF 2.0 guidelines do not, however, require that users check and update their selection every time the GVL is updated. The user’s TC strings may, however, not be updated without the user interface being presented once again and the privacy settings preferences queried. 

It lies at the discretion of the CMP and/or the publisher to decide whether changes in the GVL compared to a previous version used to confirm the user’s privacy settings justify the banner being shown again. 

The TCF 2.0 guidelines merely require that users are reminded every 13 months at the latest of their right to revoke their consent and/or to object to the processing of their data.

Do you need further help?

https://usercentrics.atlassian.net/wiki/spaces/SKB/pages/234913848