[sybercecurity]

The most charitable explanation I can think of is that they expect you to use your email account for business, and they may need to pull communication for regulatory purposes? Even that is weird and questionable and usually illegal in that you should not be using personal email for business in a regulated industry.

This link: https://legal-info.lawyers.com/labor-employment-law/privacy-...

says that it might even violate Federal law (Stored Communication Act), though if you give permission it might be more complicated as it could be viewed as "authorized".