Company-provided end-to-end email encryption is potentially non-compliant with sector-specific laws. I'm thinking specifically finance, where companies have a p

Company-provided end-to-end email encryption is potentially non-compliant with sector-specific laws. I'm thinking specifically finance, where companies have a positive requirement to monitor company-provided communication for insider trading or something like that. More broadly, end-to-end encryption may put the employer at risk in some situations. In harassment claims, employers can become liable for harassment using company-provided channels because they're argued to 'enable' it. Providing a communication channel that doesn't allow them to verify claims during an investigation or stop ongoing harassment can expose them to greater risk. To my knowledge, in Europe (or some European countries) it's illegal to monitor employee communications except in the context of a specific claim. In the US broad-based communication monitoring is generally legal unless someone can somehow prove that it's specifically used to prevent employees from organizing a union. IANAL, take these as broad-stroke general impressions and not precise or accurate statements of fact.