Anything that makes getting user data easier is bad. Better to fight each request. Better to not have a set procedure that is clear and concise. Let them figure it out each time. Change it up occasionally.
It seemed like it would be better if there were clear rules and guidelines that governed when and how data would be turned over. Then users and companies would be more aware of their rights and risks, and there would be an above-board and verifiable process for accessing data.
