Is this ethical/legal?

Tracking is fine, as long as they don’t act on it in any way that is harmful to the employee’s future/opportunities.