Employers collect a lot of data on workers beyond the basics: surveillance footage, emails, facial recognition. Now, they have to account for all of it.