Consent payments: are they lawful?