Ruling establishes that countries using spyware on people in the UK can be sued.