How can you avoid staff privacy suffering when performance data is collected remotely?

How can you avoid staff privacy suffering when performance data is collected remotely? How should management draw the line between measuring productivity and spying?