Transparency, Consent, and Control (TCC) is macOS’s privacy permission system. It asks the user before an app can access sensitive data or device features, such as documents, Desktop and Downloads folders, camera, microphone, screen recording, contacts, and location services. TCC is stored in a local consent database and enforced by the operating system.
TCC matters because many macOS attacks do not need to “break” security; they only need the user to approve access or to run malware that then requests it. In a paste-and-run Terminal attack, the command itself may launch a payload, but TCC can still slow down the attacker by blocking access to protected data until a prompt is accepted. Defenders look for unusual permission prompts, unexpected access to user folders, and malware that tries to blend in as a normal app so it can inherit previously granted consent. In short, TCC is a key control for limiting data theft, but it depends heavily on user decisions and on malware not already operating inside a trusted context.