A company organises a staff event during business hours. Say a hackathon or similar. The company arranges a photographer and videographer to record pictures, footage, presentations etc.
Speaking specifically about GDPR, does the company need to seek any level of consent from the attendees to use those photographs or video for published material covering the event for use internally, or for sharing with partner organisations (e.g. here's a brochure of how the day went, or here's an intranet article, or here's a video to show what we're up to).