Civil Society Demands Stronger Safeguards for Commercial Spyware

• •25+ civil society organizations demand enforceable safeguards for commercial spyware.
• •The Pall Mall Industry Guidelines on CCICs are set to be finalized by November 2026.
• •Weak guidelines could legitimize serious human rights abuses linked to commercial spyware.

Over 25 civil society organizations have called for enforceable human rights and accountability safeguards in the upcoming Pall Mall Industry Guidelines on Commercial Cyber Intrusion Capabilities (CCICs), which include commercial spyware. The guidelines, being developed under the leadership of the UK and France, are expected to be finalized in November 2026. The joint statement warns that weak language in the guidelines could legitimize an industry already linked to serious human rights abuses, such as arbitrary surveillance and transnational repression. The organizations emphasize the need for strict limits on the sale and use of CCICs, requiring robust human rights due diligence and independent oversight. They also call for accountability mechanisms to address human rights abuses involving CCICs. The guidelines represent a historic opportunity to establish accountability as the industry norm, but significant risks remain if proper safeguards are not implemented.