UK and US government surveillance programmes are facing criticism from the courts, MPs and data protection regulators