Yes, although collecting some data doesn't need explicit consent, such as security cameras in a store whose footage is deleted after two days- because that's a legitimate interest.

In such a case, you only need to be informed that your data is collected, for example via a sign.

Because of this, security cameras must only record your private property. After all, if you recorded the street in front of your property as well, you couldn't possibly inform people passing by of your data collection and someone disagreeing with it should still be able to use public land.

That's why there are cookie banners everywhere. You need consent to process data.