So, plenty of penalties for people who leak, or newspapers who publish, but funnily enough, no measures to bring civil servants to account for allowing the data to be leaked in the first place.
Edward Snowden was a foreigner working for a contractor to the NSA, why did he have access to so much information about GCHQ in the first place?
On the other hand, if GCHQ weren't spying on all and sundry and passing it along to the US, then there wouldn't have been anything to leak in the first place....