Law says conviction of two men for spying raises serious concerns about how they accessed sensitive information