By Google, Meta and other major technology companies are resisting federal subpoenas from US Immigration and Customs Enforcement as the Trump administration escalates efforts to obtain user data, according to ETHRWorld, citing The Wall Street Journal. The companies are delaying responses, challenging requests they consider overly broad, and expanding policies that notify users when their information is sought.
The Department of Homeland Security has in recent weeks teamed with the Department of Justice to issue grand jury subpoenas, which carry higher legal penalties for noncompliance than administrative subpoenas. Administrative subpoenas are written and approved directly by ICE officials without prior judicial review, a practice former officials from both major political parties describe as a sharp departure from standard procedure. Google logged approximately 28,600 US government subpoenas between January and June 2025, while Meta reported handing over at least some data in 88.8% of US government requests received between July and December of last year.
Why ICE subpoenas differ from ordinary court orders
The key distinction for employers and HR teams is the type of legal instrument involved. Administrative subpoenas do not require a judge to sign off before they are issued. An ICE official can approve the demand internally, which means there is no independent review of scope, relevance, or proportionality before a company receives it. Grand jury subpoenas, by contrast, come through the Department of Justice and carry the weight of criminal proceedings, making noncompliance riskier for recipients.
For technology platforms that hold employee and customer data, this changes the compliance calculation. A company that receives an administrative subpoena may have more room to push back or negotiate scope than it would with a grand jury subpoena. But the reported shift toward grand jury subpoenas suggests federal authorities are seeking tools that are harder to delay or challenge.
What this means for HR and payroll data
HR and payroll teams should understand that the data at issue in these disputes is not limited to social media posts. ICE subpoenas can target any records held by a technology provider, including cloud storage, email, collaboration tools, and payroll or HR platforms. If a company uses Google Workspace, Meta Workplace, or similar services, user data tied to employee accounts could theoretically fall within the scope of a government demand.
The practical takeaway is that employers cannot assume their HR data is outside the reach of immigration enforcement simply because it sits with a third-party vendor. Technology companies may resist or narrow demands, but they also comply with a significant share of them. Meta’s reported compliance rate of 88.8% for US government requests in the second half of last year shows that resistance is the exception, not the rule.
The notification question for employers
One area where the reported resistance is visible is user notification. Some technology companies are expanding policies that tell users when their data has been requested, unless a gag order or legal restriction prevents it. For HR teams, this raises a practical question: if an employee’s account data is sought, will the employer know before the employee does?
There is no uniform answer. Notification policies vary by company and by the type of legal process involved. Grand jury subpoenas often come with secrecy obligations that prevent companies from disclosing the request. Administrative subpoenas may not carry the same restrictions. Employers should not assume they will receive advance notice, and they should not assume their technology vendors will fight every demand.
Steps HR and payroll leaders can take now
The reported escalation in subpoenas does not require immediate action for most employers, but it does justify a review of data practices. HR and payroll leaders can take several practical steps without waiting for new legislation or court rulings.
First, identify which vendors hold employee data and what those vendors’ policies say about government requests. Many providers publish transparency reports or law enforcement guidelines that describe how they handle subpoenas and whether they notify affected users.
Second, review data retention schedules. Information that is not retained cannot be produced. HR teams that routinely delete old employee records, chat logs, or location data reduce the volume of material that could be subject to a future demand.
Third, document the legal basis for any data sharing that occurs. If a vendor informs the company that it has complied with a subpoena, the employer should record what was shared, under what authority, and when. This creates a record that may be useful if questions arise later.
The political and legal timeline
The reporting indicates that tech executives are preparing for potential congressional investigations led by Democrats following the upcoming midterm elections. Rep. Shri Thanedar, who co-launched a probe into tech compliance earlier this year, said company leaders “need to be prepared to say, under oath, why they did what they did.”
Inside Meta, leadership is assessing vulnerabilities to Democratic oversight if congressional power changes hands. Google leadership has weighed similar concerns while worrying that stonewalling could trigger retaliation from the administration, such as further scrutiny of its pending federal antitrust cases. For employers, this means the legal landscape remains unsettled. The balance between compliance and resistance is still being negotiated between technology companies and federal authorities, and the outcome could affect how readily vendors share data in the future.
Sources: ETHRWorld
Photo: Infosys limited Zurich Switzerland ( Ank Kumar ) 22 by Ank Kumar, CC BY-SA 4.0
