Security News > 2023 > May > EU proposes spyware Tech Lab to keep Big Brother governments in check
EU MEPs want to start the public body - along with a host of other recommendations contained in a report that landed last night - after the so-called PEGA committee spent over a year looking into the use of Pegasus and equivalent spyware.
In April, Citizen Lab and Microsoft both reported that a zero-click exploit allegedly developed by Israeli spyware company QuaDream - called "Reign" - was used to deliver spyware on devices running Apple's iOS 14 on victims' phones.
The proposed regulations will allow spyware to be used only in EU states "Where allegations of spyware abuse have been thoroughly investigated, national legislation is in line with recommendations of the Venice Commission and EU Court of Justice and European Court of Human Rights case law, Europol is involved in investigations, and export licences not in line with export control rules have been repealed."
Committee chair Jeroen Lenaers noted that the report still allowed for the use of spyware by member states, saying: "Stricter EU-level scrutiny is needed to ensure that spyware use is the exception, to investigate serious crimes, and not the norm. Because we acknowledge that it can - when used in a controlled manner - be an important tool to combat crimes like terrorism." He added: "Our committee has formulated a wide range of proposals to regulate the use of spyware, while respecting national security competences."
According to data collected by Carnegie's global inventory of commercial spyware and digital forensics between 2011 and 2023, at least 74 of the world's governments contracted with commercial firms to obtain either spyware or digital forensics technology.
When it comes to spyware abuse, the committee said, not only should spyware be allowed solely when strict conditions are fulfilled, but a uniform definition of national security is needed.
News URL
https://go.theregister.com/feed/www.theregister.com/2023/05/09/pega_commitee_report/