Social media mass surveillance is permitted by law, says top UK official