If this company is an ISP in the USA, they are in violation of privacy law and can be sued by users, or prosecuted by the Fed.
CALEA establishes that no ISP may do deep packet inspection for the purposes of law enforcement without a subpoena or CALEA action. PERIOD END OF LEGALITY...
