That's very standard in USA, no laws preventing that and employees usually sign a contract allowing IT to do this without having to tell. I heard some companies even make emails disappear, e.g. if you wanna join Blind the sign up email might magically be deleted via some rule. GSuites supports and enables such policies to be implemented very easily.