Spies ‘unlawfully’ accessed data then refused to talk about it properly – oversight body