As I understand it, from a legal point of view it is a grey area. The case law for a company examining its employees email upheld it was the company's right, while for an ISP reading customers email (without a court order) it was judged illegal. Whether a student paying a university establishes them as an ISP or whether a student is considered an employee is a subject which to my knowledge, has not been legally settled.
Slashdot Mirror
As I understand it, from a legal point of view it is a grey area. The case law for a company examining its employees email upheld it was the company's right, while for an ISP reading customers email (without a court order) it was judged illegal. Whether a student paying a university establishes them as an ISP or whether a student is considered an employee is a subject which to my knowledge, has not been legally settled.