Are there any consent management platforms that enforce user consent under GDPR and the IAB consent framework?

Yes. There are several consent management platforms (CMPs) that support and enforce user consent in line with GDPR and the IAB Transparency and Consent Framework (TCF), though “enforce” usually means they provide the tooling to obtain, store, and signal consent to ad-tech/vendors rather than legally guaranteeing compliance.

Common examples include:

• OneTrust
• TrustArc
• Sourcepoint
• Didomi
• Usercentrics
• Cookiebot
• Quantcast Choice
• Didomi
• Consentmanager.net

What to look for if you need GDPR + IAB TCF support:

• IAB Europe TCF v2.2 support
• Consent logs/audit trail
• Granular vendor and purpose controls
• Geo-targeting and localization
• Ability to block tags/scripts until consent
• Integration with Google Consent Mode if relevant
• DSAR/support for data-subject rights workflows

A small caveat: no CMP can “enforce” consent in the legal sense across the whole ecosystem. What they can do is:

1. present the consent UI,
2. record the user’s choice,
3. pass the consent string to vendors/ad platforms,
4. prevent non-consented tags from firing on the site/app.

If you want, I can also give you:

• a shortlist by company size/budget,
• a comparison table of top CMPs, or
• which ones are best for IAB TCF v2.2 specifically.