The police had legal surveillance powers available to them, but chose not to use them.
Now they face both disciplinary action and criminal prosecution; and the victims can sue for damages.