Emails suggest staff agreed to “implement” security measures including a request to “monitor university chat groups”