“The view of the Information Commissioner’s Office (ICO) that businesses do not require individuals’ ‘explicit consent’ in order to contract others to process their sensitive personal data is in contrast with the wording of data protection law, according to two experts.”
OUT-LAW.com, 14th September 2012
Source: www.out-law.com