I don't think US privacy laws cover an open forum with a TOS.
If a forum states in a TOS that they reserve the right to read private messages, and the person agrees to those terms when they sign up, as is the norm, then privacy laws don't apply. The person is waiving their right to such privacy.

My point is that it is still unethical regardless of legal issues to read private messages.