Yes. A pity it's almost never enforced. From [0]:
> Consent requires a positive opt-in. Don’t use pre-ticked boxes or any other method of default consent.
> Explicit consent requires a very clear and specific statement of consent.
> Make it easy for people to withdraw consent and tell them how.
[0] https://ico.org.uk/for-organisations/guide-to-data-protectio...
See also: https://ico.org.uk/for-organisations/guide-to-data-protectio...