I don't mind the law, but they shouldn't be collecting data in the first place. No data - no problem.
We have the same kind of laws in Europe, and I'm pretty sure that the US requires it too.
And not complying with (secret - at least in the US) court orders just isn't an option if you want to keep your business in that country.