Yes, keeping records of consent is crucial for compliance. Under GDPR, you must be able to demonstrate that consent was obtained. This involves maintaining records of when, how, and under what terms consent was given. Not keeping these records can make it difficult to prove compliance in the event of an audit or investigation.