I submitted a medical certificate for one week off due to stress in the workplace. As I only had 1 day sick leave left, it was commuted to annual leave. An email was inadvertently sent to me by mistake by my HR manager. It detailed that my movements were being monitored by a PI whilst I was off. I immediately submitted a workcover claim. Were their actions legal?