How can I monitor an employee's activity on a remote Mac?
If you do not trust the remote worker, do not hire them.

Legal, not technical

This is a legal problem, rather than a technical one. You should agree to a contract with the remote worker stating the limits you desire and how they will be enforced.

See Stopping certain data from ever leaving your Mac? for a related question.