These days I would hope the GDPR big hammer could be brought to bear on such cases.

(Also, you could make the argument that installing such software on someone else's work laptop constitutes IP theft and/or breach of local computer security laws...)