You wrote "don't violate the law over our network". Who determines in this case whether the law is violated? If you changed your statement that this is a precaution to manage legal risk, then we get into an entirely different realm.

What if AT&T's risk management software scores that its customer is "likely" to commit a petty crime by analyzing his traffic? Turn him off as well?