Historically, businesses have been able to treat user consent purely as a risk management exercise, something they have to do simply for privacy compliance. However, the rise of the internet of things combined with a fast-changing regulatory environment means this mindset needs to change — and soon.