Not automatically, but it makes compliance difficult to evidence. If personal data has been entered into a tool your organisation never assessed, you remain the controller for that processing, and the ICO expects you to know where AI is used and on what lawful basis.
