I don’t believe it is morally justifiable to work at a bank and spy on anyone’s purchases.
In most countries it is actually also not justifiable in the court of law. Yet the issue here is that there is no efficient punishment for anyone working at a bank and breaking this law.
The moment these workers and supervisors get jail sentences or high financial penalties these issues could stop.