They need a warrant by law in most cases but ICE seems to be requesting this data without much to back it up. The standard approach is to challenge it and keep records of the interaction.