I'm not sure if it's a legal requirement or they just don't want to upset law enforcement. All I know is they're using our data warehouse and having me write queries that answer those subpoenas when they come in.

Well I know that in the UK it is a legal requirement, but not sure about the US.