I'm not sure if it's a legal requirement or they just don't want to upset law enforcement. I guess maybe they're just keeping the data for other reasons and then law enforcement is jumping on that. All I know is they're using our data warehouse and having me write queries that answer those subpoenas when they come in.
Well I know that in the UK it is a legal requirement, but not sure about the US.