>1. Is this legal in all jurisdictions an employee could conceivably be based in?

I don't see why not. To my knowledge employment information isn't protected by law, and presumably whoever provided equifax that information turned it in willingly.