If a government requires businesses to store customer data, then it should require some level of database security. If a business gets their customer's data stolen due to a database hack because of some unfixed security hole, then that business could to be blamed too.
Well, many don't even know this could be a problem first of all. For example, there are lots of people storing critical data in cloud storage - this database security thing is pretty much something you learn about if you are interested in tech. I'm talking about smaller businesses too, not necessarily corporations which certainly do have some workers building up stronger security.
The thing I'm trying to underline is, the things governments could solve and find out by asking a business to hand out a specific customer's data might be nothing compared to the damage a large security breach could do.