Can I license employee emails to AI?
The short answer
It depends on location. California covers employee email since 2023 and counts it as sensitive unless you're the recipient. Virginia excludes employment context. The law firm Frankfurt Kurnit lists HR files, payroll, health and benefits, and union communications as categories to exclude outright. Ask counsel.
Employee email carries four layers at once. They are privacy law, labor law, privilege and partner contracts. Here is what the primary sources say, one layer at a time.
Does privacy law cover employee email?
In California, yes. The state attorney general's CCPA page says the exemptions for employment-related and business-to-business information expired on 31 Dec 2022. So employee data has been covered since 1 Jan 2023.
The statute lists "the contents of a consumer's mail, email, and text messages" as sensitive personal information. The one exception is when the business is the intended recipient.
It is unclear how that applies to a company that holds employee threads with outsiders. I found no authority on the point.
What about states outside California?
Virginia defines a consumer to exclude a person acting in a commercial or employment context. It also counts a sale only when money changes hands. Other states differ. I'd check each state where your employees sit.
What do federal law and contracts add?
Section 7 of the National Labor Relations Act protects employees' right to engage in concerted activity, which means acting together on work issues.
Section 8(a)(1) bars employers from interfering with it. FKKS notes that messages about pay and working conditions can fall inside it.
The mailbox also holds privileged material. That is covered in attorney-client privilege. It holds partner NDAs too. Those are covered in NDAs.
HR and payroll threads have their own page: HR and payroll records. For the archive as a whole, with buyers, exclusions and a sample mailbox inventory, see licensing company emails to AI.
Has anyone been fined or sued for licensing employee email?
I found no lawsuit, regulator action or NLRB charge over a company licensing its own employee email archive to an AI buyer. An empty search is no clearance.
The closest event is the Spirit Airlines bankruptcy sale. The flight attendants' union filed a limited objection on 18 Aug 2026. The data set holds about 100 million emails.
It asked the court to set aside flight attendant records. It also asked for a review of employee confidentiality.
Talk to a privacy or commercial lawyer in your state before you sign. The rights check and risks page list the questions to bring.
Vaultfish helps you run the process. We are not lawyers and this is not legal advice. If you need counsel who knows this area, we can point you to one. Ask for a referral
