Pall Mall Process Launched to Address Spyware Abuse Globally

• •The Pall Mall Process aims to curb the abuse of commercial cyber intrusion capabilities.
• •Around 100 countries are reported to have procured CCICs, raising global security concerns.
• •A non-binding Code of Practice for States was adopted by 27 countries to guide CCIC usage.

In July 2026, the Pall Mall Process (PMP) was officially launched by France and the UK to combat the irresponsible use of commercial cyber intrusion capabilities (CCICs), including spyware. This initiative follows a significant increase in the global procurement of CCICs, with reports indicating that around 100 countries have acquired such tools. A non-binding Code of Practice for States was adopted in April 2025, signed by 27 countries, to guide governmental actions regarding CCICs. The PMP aims to foster collaboration between governments, industry, and civil society, emphasizing the need for public-private partnerships. The initiative is a response to the growing concerns over human rights violations linked to spyware, particularly highlighted by cases involving the NSO Group. Currently, a Code of Practice for Industry is under development, expected to be finalized at the Paris Peace Forum in November 2026. The consultation process revealed uneven implementation of customer vetting and supply chain due diligence across the market. The PMP seeks to create a focused dialogue among like-minded states to effectively address the risks posed by CCICs.