Luckily I am now in a position where I am fully responsible and aware of the routes my data takes. Yet we as a B2B ISP constantly get requests by intelligence services to provide information regarding our customers. Strangely they always assume that's totally okay to -just- ask for the data, instead of going the formal way. If we demand the judicial permissions they always rant about emergencies and so on. We can't help but follow the law, and the law disallows us to keep specific data for more than 60 days. I am really curious about how many ISPs voluntarily provide their customer data without asking for judicial permission beforehand.
Such conversations are coming around 2 or 3 times a week.