Surreptitiously recording audio or video like this is in some states illegal.
Yes but I suspect corporate legal slips some disclaimers or permissions in the very fine print like when someone logs on.