A new report warns that gaps in regulation are allowing employers to monitor workers without their knowledge or meaningful consent.