[factsarelolz]

So which is easier? Law Enforcement going after Google for the data or LE going after the site itself for the data on customers?

Seems like it would be easier for LE to threaten a small pharmacy versus a big corp like google.

[jrochkind1]

It's worth thinking about, but it's hard to say. Perhaps Google would voluntarily turn over the info without a search warrant, and/or would do it quietly without telling the customer even if not required by law to keep it quiet -- but the small pharmacy with the relationship with its customers would not. Perhaps law enforcement already has a relationship with google and established channels for accessing this info, whether with or without a court order.

[shadowgovt]

> Perhaps Google would voluntarily turn over the info without a search warrant

Not in general in this scenario. Google has made exceptions in the past (generally around an emergency with threat to life involved), but they're reluctant to make such exceptions for even federal LEO. State-level LEO, which is who would be making these requests, has far less leverage over Google; they could make it harder for Google to do business in their state, but (a) the states we're talking about are doing that already, so Google cares less about a lever that's already being pulled and (b) the states don't have higher authority to appeal to (what are they gonna do, try to make a Supreme Court case out of noncompliance with... A warrantless data request?).

[yunohn]

Ironically, you could just Google this, instead of speculating wildly?

They review, question, narrow, and reject requests for user info. They also notify users unless prevented by a court.

https://policies.google.com/terms/information-requests?hl=en

[Nextgrid]

Google's stalking can also deanonymize a user even if they used fake details and an anonymous payment method on the website.

[snapcaster]

I disagree with your framing. It costs resources to target specific companies even small ones. Google has ALL the data on ALL the pharmacies. You get it from them and just not bother with each individual company