CSIS is required to report any potentially unlawful or Charter non-compliant activity from employees to the public safety minister, but a watchdog says that hasn’t been happening.