Is this against the law and if so what actions can be done: ?

I don't see anything that would be against the law. But it does seem that this new istant manager isn't smart enough to pword protect doents. But stupidity isn't illegal either.