Union busting is easy to do and hard to prove. This would act as a supporting regulation by making it more difficult. I imagine a legal framework similar to other privacy regulations: nothing about specific software or implementations, but instead new classes of data that are illegal to collect or store about your employees. There is complexity there, but something like mouse movements and keystrokes as described in the article is completely black and white.