Meta's new tool tracks employee mouse movements and clicks for AI training, potentially violating EU GDPR rules by capturing non-US data.