There's been a lawsuit about this in Europe, couple years back. Employee won, breach of privacy according to Article 8 the European Convention of Human Rights. See https://www.bbc.com/news/technology-63203945