Email Audit for SERIOUS policy violations

Running Exchange Server 2003 sp3 on Windows Server 2003 Standard.

I have a serious HR issue with a user’s email, emails that violate email and internet policies in our organization. This is going to get nasty very quickly. What is a good audit software? I need to audit this mailbox without violating protocols etc.
HELP!