Another possibility is that email is sometimes unencrypted, email clients vary in how secure they are, and some regulation says they have to care about this because privacy.

But who knows, making stuff up like you and I did isn't evidence. At best it gives you an idea of the range of possibilities.