When creating an email from a record, e.g. sales invoice, it creates a link to both the mail record and the email queue record in the link manager of the invoice.

The user is able to open the email queue record, and then browse up and down between records. Since the email queue is shared across all companies, this is a potential breach of GDPR. Is there any way to allow a user to only view the email queue record that they have opened, or alternatively to allow users in a company to only access the email queue records created from their company?