Generally, many employers will have either:
- a policy on the use of work equipment/IT systems/communication during work time, or
- some catch-all clause in the employment contract.
Generally speaking, your response depends on the policies in question. However, internal IT processes and procedures need to be designed with these company policies in mind - if you don't want to be put in the position of reading misaddressed email, don't store or log the stuff!