The CIA director has pretty much acknowledged that they did indeed spy on the committee in this letter: http://www.wyden.senate.gov/news/press-releases/brennan-lett...

> The Computer Crimes and Abuse Act...expressly "does not prohibit any lawfully authorized investigative, protective or intelligence agency...of an intelligence agency of the United States"