From the brief [1]: "There is no statute, nor any other law, supporting the government’s demands."

Does it mean that essentially the companies are intimidated to comply without the rule of law? Under what law and what sanctions do they face if full statistics is published?

[1] https://dt8kf6553cww8.cloudfront.net/static/docs/DropboxFISC...