> Tax, banking and health related information are some of the things that I can think of that would be shared on a need to know basis with people at work and have no business to be seen by people outside of the intended audience.

I am against workplace surveillance, but why would people receive this information to their work email address?