I did some quick research and can't find any legal precedent/laws to protect Web-based e-mail users from privacy violations.
I even check with the Electronic Privacy Information Center which is kind of like the ACLU of the Internet and couldn't find anything.