Model document DP6 - Consent form

If you act as a data controller or a data processor you must have a lawful basis to process an individual’s personal data and sensitive personal data. Consent is one of six lawful bases to process an individual’s personal and sensitive personal data. 

See also:

• REC legal guide on data protection