'We do push back where we can, and do everything we can to protect our users’ data. But we don’t write the laws.'