Obviously there are limits on what a company can ask its employees to do. I don't think a company would get very far if it required employees to bring in nude photos or dress up in blackface or something.

But in this case these are files that are related to the day job, and are materially impacting the business. Seems like they would be on solid ground conditioning further employment on furnishing the files.