UK must balance surveillance and data collection with privacy