Report says officers collected details of activists' sexuality and bank accounts, and operations should have been shut d