Does the university have an established policy for email retention and access to that data? It seems unlikely that they wouldn't, but I don't see it mentioned

Does the university have an established policy for email retention and access to that data? It seems unlikely that they wouldn't, but I don't see it mentioned anywhere. It's never a good idea to rely on goodwill to prevent access to sensitive data - if it's there, a need arises and it's not illegal, it's eventually going to happen.