Comment by ThePhysicist

It's the TCF 2.0 framework by IAB Europe. It's indeed very questionable whether it's compliant with GDPR and the first authorities have deemed it unlawful (notably the Belgian DPA), so I'm hoping it will die in a year or two.