I'd say investigating corporate trade secret leaks with substantial evidence pointing to an MS owned Hotmail account, to which the leaker agreed could be accessed by MS personnel would be deemed necessary.