Company legal departments should absolutely review requests and make sure they're legal before handing over data.

If they suspect the request isn't legal, they can refuse it, and then it can be escalated to a judge.

Are you suggesting that every request should go through a judge before it gets sent to a company? That would be great, but even then, different judges interpret laws differently, so a company will still do a legal review before deciding whether or not to comply.