Could a court order force us to compromise our employees’ privacy?

Q. I heard that Google is being forced to hand over YouTube access logs to Viacom as evidence in a copyright suit. This seems like a major privacy issue. Our company provides free health information to our employees over the Internet. Our internal web site users have created employee profiles that include personal information such as their names and e-mail addresses. Could we be forced to hand over our user information if we ever became involved in litigation? ...