You do not need consent for the initial automated response if the message is consistent with what your direct response offer has promised. The message must be sent immediately, containing only the requested information and nothing more. Any additional marketing messages would require consent.