Powers that allow UK security services to collect large volumes of personal data are not “inherently incompatible” with privacy laws, say MPs and peers.