I'm located in the EU.
My employer recently became a contractor for an american company. We deal with software.
A requirement of the american company was that on all machine of the people working under that project, basically spyware must be installed (they track everything). I can use the laptop given to me by my employer for personal use as well (written in the contract), however there is no explicit clause for any gathering of personal information in that contract and I have not signed anything.
This seems quite illegal, especially with the GDPR stuff in the EU. Unfortunately I could not find any concrete law statements on a similar issue. Can someone point to me such sources?