The US court of appeals has ruled that the NSA’s bulk phone data collection wasn’t authorized under law. The metadata surveillance program has been scrutinized ever since Edward Snowden made its existence public almost two years ago. But no ruling ha…