Hey there,

My boss, the CFO, just asked if we can give our interim HR Director access to everyone's email to facilitate investigations. Apparently, she had this access at her old company.

Thoughts on a response?

Second Edit:

Wow, the CEO (and owner) just nixed the idea! I'm shocked. He's been a "it's our equipment, we should be able to do whatever we want!" kind of guy. I guess I've gotten through to him over the past 5 years.

First Edit:

I'm going to offer them access via eDiscovery only, so that should reduce the risk of inbox abuse (creating or deleting email). I'm going to insist that when eDiscovery cases are created, they remain for a period of five years and are fully documented as to why they were created and what was sought. It's what the IT department does. That way there's a record, which will hopefully reduce abuse.