Discussions about data privacy tend to focus on the consumer-seller dynamic. What personal information do companies have a right to collect, and how should they be expected to use and care for it? But another dynamic, between employer and worker, raises even thornier questions.