EU Urged to Strengthen Legal Framework Against Spyware
Civil society and journalists’ groups in Europe are pressing the EU for stricter measures against spyware applications. The Center for Democracy and Technology (CDT Europe) and fellow organizations in a coordination group argue that spyware significantly threatens EU democratic values, public debate, and healthy civic spaces. They emphasize that spyware undermines lawmakers’ independent decision-making and hampers journalists and activists from holding governments accountable.
The group asserts that spyware is illegal under EU law as it violates privacy rights and data protection regulations. They reference findings from the European Parliament’s Committee of Inquiry into Pegasus spyware (PEGA), which revealed widespread use of spyware tools by EU states to surveil journalists, politicians, and human rights activists.
The coordination group advocates for comprehensive action from EU institutions, including suspending exports of surveillance technology, providing better remedies to spyware victims, and avoiding national security exemptions that weaken citizens’ rights. They call for a new EU legal framework to address spyware challenges, including bans on production, import, servicing, and use of spyware that disproportionately interfere with fundamental rights.
Additionally, the group seeks a complete ban on commercial companies developing and selling spyware and prohibits trading vulnerabilities except for system security enhancement. They stress the importance of mandating responsible disclosure of vulnerability research findings to strengthen overall cybersecurity.
