I'm the systems administrator for a company that does a lot of outbound emails and a lot of inbound emailing to potential clients.
We've had a email auditing tool running for a couple weeks that catches on to certain aspects of emails (malicious keywords, potential viruses, etc). I've noticed a spike in possible malicious emails.
During my time configuring the auditor our HR representative barged into my office and told me that it is illegal to audit a company email server due the the
Snowden act (I have no idea what this is, just quoting what was said to me). My manager lost his mind, and told me I need to shutdown the auditor immediately. I tried to explain the reason behind the audits and what the audit is for, however, they requested it be taken offline. So I have disabled my auditor. The problem I have with this, is that everything is already saved by our mail server (we use GSuite) and is already audited, the only thing I was doing was routing all of them into an inbox so we can access them more efficiently if needed.
My question, is this a true statement, am I illegally auditing my users emails?