Get your staff's consent before you monitor them, tech inquiry warns