A wise man's opinion (thank you @EUstaran):

It's really very simple. The key thing is not to make assumptions. You might assume previous consent is OK - but how did you gain that consent? Does it meet the standards as outlined by the ICO?