Consent is one lawful basis, not the default answer
Consent is the basis people reach for first and frequently the wrong one.
It has to be freely given, specific and as easy to withdraw as to give, which means it fails whenever the person has no real choice, such as an employee or a customer who cannot get the service without it. For most ordinary business processing, contract or legitimate interests is both more honest and more robust. Asking for consent you would ignore a refusal to is worse than not asking.
More on UK GDPR
- Lawful basis is the reason processing is permittedIt will not turn without the reason
- Access rights concern personal data, not every documentThe lines about you, not the page
- Erasure is not an absolute delete buttonIt will not travel the whole way
- Data portability is narrower than a database exportOnly what fits the frame
- Rectification requires organisations to be able to correct inaccurate personal data wherever it is maintainedCorrect it once, then chase every copy
- Restriction can pause use without erasing dataStopped, not shredded