The patient watchdog’s ruling points to wider risks around consent and clinical justification in how NHS trusts are using a controversial bedroom surveillance technology called Oxevision. Harriet Williamson reports.