UK spy agencies sharing bulk personal data with foreign allies was legal