CDT Europe, in collaboration with twelve civil society and journalist organizations, has issued an open letter to EU Institutions. The letter addresses concerns over the unchecked use of spyware within the European Union. The group urges EU authorities to take decisive action against the threats posed by spyware, improve digital infrastructure security, and manage the spread of commercial surveillance technologies within the EU market.
The letter points out that despite evidence of spyware misuse, such as Paragon's spyware being used against journalists and human rights defenders, there has been little follow-up since the European Parliament’s PEGA Committee made recommendations in 2022.
The coalition is also worried about certain EU Member States becoming hubs for the spyware industry due to fragmented national laws and lack of oversight. This situation allows these states to serve as entry points for spyware vendors into the EU market.
While international efforts like the Pall Mall Process indicate a need for regulation, the letter emphasizes that only coordinated EU action can provide political momentum and regulatory coherence. This would help turn national commitments from Member States into a unified response that supports democratic values and fundamental rights.
The letter calls for urgent EU action to address ongoing violations and protect rule of law and fundamental rights as outlined in the EU Charter and European Convention on Human Rights. It urges transparent regulatory measures in areas under EU competence such as fundamental rights, internal market regulation, export controls, and cybersecurity.