I've worked for an ISP for about six and a half years. In that time, I have received I-don't-know-how-many e-mails about people torrenting and so on. I've had one conversation with a Special Agent from DHS investigating credit card fraud.
Over this same period, I have given out a customer's identifying information zero times (if more than 24 hours have passed, there is a very small chance that I am able to identify the customer). In every instance, it was "sorry, I am not able to identify the customer".
Zero is also the number of times I have heard anything from any of my upstreams regarding any ToS violations or similar.