IANAL, and I've not been directly involved in any of this, but it was my understanding that compliance merely meant you had to present the data for collection - ie, you provide a mirror port and it's up to the LEA to actually collect the data from there. I'm sure someone here would have a more definitive answer though.