DLA branch holds a renewal form for a client dated 2005. DLA felt that this was vaild consent to look for info form the client and never informed her that her case was been looked into.

My question is would this count as vaild consent, Data protection holds that data held should be destoryed in a timely manner but is there any to state that up to date consent must be recieved by the client in order to get personal data in relation to the client from the GP?