Yes, your company must obtain explicit consent from employees to collect and process their personal data. This consent should be obtained in a clear and unambiguous manner and employees must be informed about what personal data is being collected, why it is being collected, and how it will be used.