Yes, email tracking is legal under GDPR if your organization complies with GDPR. Compliance depends on your organization relationship with the recipients of your emails. For example, under new GDPR you may ask for a new consent to receive a newsletter or not, depending on the legitimate interest of this communication. The previous privacy laws and the new GDPR do not require explicit consent for email marketing activities (including email tracking) in all cases.