Group of eleven likeminded partners, lead by the United States have formed a pact with an additional countries in update, to endorse a first-of-its kind multilateral commitment to work collectively and counter the proliferation and misuse of commercial spyware.
Consolidating on the agreement, on March 18, 2024, at the third Summit for Democracy; Finland, Germany, Japan, Poland, the Republic of Ireland, and the Republic of Korea joined the pact, and on September 22, 2024, on the margins of the UN General Assembly, Austria, Estonia, Lithuania, and the Netherlands also endorsed the statement.
In a uniformed statement, the governments of Australia, Austria, Canada, Costa Rica, Denmark, Estonia, Finland, France, Germany, Ireland, Japan, Lithuania, the Netherlands, New Zealand, Norway, Poland, Republic of Korea, Sweden, Switzerland, the United Kingdom, and the United States, recognize the threat posed by the misuse of commercial spyware and the need for strict domestic and international controls on the proliferation and use of such technology.
Stressing that commercial spyware has been misused across the world by authoritarian regimes and in democracies. Too often, such powerful and invasive tools have been used to target and intimidate perceived opponents and facilitate efforts to curb dissent; limit freedoms of expression, peaceful assembly, or association; enable human rights violations and abuses or suppression of civil liberties; or track or target individuals without proper legal authorization, safeguards, or oversight.
The association further established that; the misuse of these tools presents significant and growing risks to our national security, including to the safety and security of our government personnel, information and information systems.
Strengthened by informed knowledge of the threat posed by commercial spyware, they therefore share a fundamental national security and foreign policy interest in countering and preventing the proliferation of commercial spyware that has been or risks being misused for such purposes, solidifying on core interests in protecting individuals and organizations at risk around the world; defending activists, dissidents and journalists against threats to their freedom and dignity; promoting respect for human rights; and upholding democratic principles and the rule of law.
We are committed, where applicable and subject to national legal frameworks, to implementing the Guiding Principles on Government Use of Surveillance Technologies and the Code of Conduct developed within the Export Controls and Human Rights Initiative.
The Commitment Of The Partners To Counter The Misuse Of Commercial Spyware
- Working within our respective systems to establish robust guardrails and procedures to ensure that any commercial spyware use by our governments is consistent with respect for universal human rights, the rule of law, and civil rights and civil liberties;
- Preventing the export of software, technology, and equipment to end-users who are likely to use them for malicious cyber activity, including unauthorized intrusion into information systems, in accordance with our respective legal, regulatory, and policy approaches and appropriate existing export control regimes;
- Robust information sharing on commercial spyware proliferation and misuse, including to better identify and track these tools;
- Working closely with industry partners and civil society groups to inform our approach, help raise awareness, and set appropriate standards, while also continuing to support innovation; and
- Engaging additional partner governments around the world, as well as other appropriate stakeholders, to better align our policies and export control authorities to mitigate collectively the misuse of commercial spyware and drive reform in this industry, including by encouraging industry and investment firms to follow the United Nations Guiding Principles on Business and Human Rights.
It was resolved that their efforts will allow a synergy of work to champion efforts to develop and implement policies to discourage the misuse of commercial spyware and encourage the development and implementation of responsible use principles that are consistent with respect for universal human rights, the rule of law and civil rights and civil liberties.
