Even that is illegal... you would need to have an updated contract, or some proof that you've accepted the change in contract terms.
Even if the contract was updated or he accepted the terms, a contract cannot override law. The company must be worried that he will be malicious or something, but then should find another way from him damaging their reputation or systems in a different way, not force something he has legal right to