The way I've seen it done usually is that the mail server tacks on the confidentiality notice after the user sends the message. So they would see it on a reply

The way I've seen it done usually is that the mail server tacks on the confidentiality notice after the user sends the message. So they would see it on a reply, but never on the initial message. Maybe other companies show it to you on compose, I'm not sure.