How can this level of state surveillance be legal?

Anya Proops addresses the above question, prompted by the recent revelations about the US Prism programme, in an article in today’s Guardian.  She discusses the main legal constraints on surveillance in the UK  – Article 8, the Data Protection Act, and the Regulation of Investigatory Powers Act.  And she even manages a name check for Panopticon – both the Benthamite version, and this blog.  The article is at page 32 of today’s print edition, and it’s online here.  It’s already attracted a lot of attention, both by way of comments on the online version, and on Twitter.