Does using ASSIST mean we need consent to record?

The requirement for consent depends on the organisation's specific processing activity and applicable legal and regulatory requirements.

The decision about the UK GDPR Article 6 lawful basis belongs to the customer as controller.

Permission to record should also be considered separately from the underlying lawful basis. Organisations should provide appropriate information about recording and AI processing and follow their own legal and regulatory requirements.

The client should obtain advice from its DPO or legal team on the appropriate Article 6 basis and, where relevant, Article 9 and Article 10 conditions.