Companies that receive government information demands have to obey the law, but they often have room for maneuver. They scarcely ever use it.