Skip to content
France and Britain Establish Guidelines for Commercial Hacking Firms

France and Britain Establish Guidelines for Commercial Hacking Firms

First seen 11 Nov 2026, 17:03 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 11, 2026 at 17:09 UTC
  • •Fourteen governments adopted non-binding guidelines for commercial hacking firms.
  • •The guidelines aim to prevent misuse of cyber intrusion capabilities linked to human rights abuses.
  • •Companies are urged to vet customers and monitor for misuse without facing penalties for non-compliance.

On November 11, 2026, fourteen governments, led by Britain and France, adopted guidelines for commercial hacking firms during the Pall Mall Process. These guidelines aim to address the misuse of commercial cyber intrusion capabilities (CCICs), which have been linked to abuses such as surveillance of journalists and activists. The French Foreign Ministry emphasized the need for responsible conduct in the industry, urging companies to vet customers and monitor for misuse. Although the guidelines are non-binding, they represent the first global standard for the sector. The initiative has faced challenges since its inception in 2024, with concerns about its effectiveness in changing market practices. Notably, the guidelines do not impose penalties for non-compliance, relying instead on enforcement pressure from governments that purchase these tools.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 20h ago How this analysis works

Timeline

2026-11-11
Pall Mall Process guidelines adopted
Fourteen governments, led by Britain and France, adopted guidelines for commercial hacking firms to address misuse of cyber intrusion capabilities.
The Record

More articles in this cluster (2)

Following this threat?

Track Judgement Panda and Sophos in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 2

Common questions

What are the guidelines for?
The guidelines aim to promote responsible conduct among commercial hacking firms to prevent misuse of cyber intrusion tools.
Are the guidelines mandatory?
No, the guidelines are non-binding and do not impose penalties for non-compliance.
Which countries are involved in the guidelines?
Fourteen governments, including Britain, France, the United States, Germany, Italy, and Japan, participated in adopting the guidelines.