Keeping secrecy the exception, not the rule
The right way to deal with this is to set up your system such that you can't turn over customer data because it's encrypted with a key to which only the customer access.