Answer
No. The organisation should determine the lawful basis that actually applies to the processing. Consent is one possible basis in some contexts, but it is not automatically required or suitable for every operation.
Explanation
A valid privacy plan starts with the applicable law and the organisation's role. Asking for consent when another basis applies can create confusion, while relying on consent when people cannot freely refuse may also be inappropriate.