a) Have his person doc forward mail to a groupb) have this group deliver to some database (tracking) and the person at the same time (Mail in database documents adressed from the group).
c) Make sure that person is only reader in the ACL of names.nsf to make sure, that he can’t change his person records (the setting in a)
This way you end up with a database that includes the content, too.