Uncontrolled access to data, with no audit trail of activity and no oversight would be going too far. This applies to both commercial and government use of data about people. ↗
The office has oversight of people who do analysis and oversight of people who do operations, but it is not charged with doing either. That is an important point to make. Those functions are performed by the CIA, DIA and other agencies. ↗