It seems rather absurd that any employer would dive into their employee’s privacy rights in such a way, nevertheless, what they are doing is completely legal (in about half of the United States).