If CCTV inside a business's premises are okay, you're going to have a hard time arguing that any other surveillance is unlawful. They're not storing or sharing

If CCTV inside a business's premises are okay, you're going to have a hard time arguing that any other surveillance is unlawful. They're not storing or sharing anything personal about you that you haven't already granted them permission to store (if you have a work badge with your photo on, you already consented to them storing a likeness of your image for identification purposes). As much as I empathise with you on your stance against RTO, there's nothing here to fight.