The U.K. is set to rein in the Internet of Things (IoT) with a new regulation, and lawyers say it could usher in more third-party responsibility.