MFRR: EU action needed to tackle spyware abuses after Pegasus revelations

Press-ECPMF

15 September 2021

No Comments

mfrr logo

15 September 2021

As the European Parliament today debates the Pegasus spyware scandal, the undersigned partners of the Media Freedom Rapid Response (MFRR) call for an immediate investigation into the alleged use of the spyware against journalists by Hungarian authorities and urge the strong implementation of new EU rules on the export of cyber-surveillance technology around the world.

Revelations by the Pegasus Project that at least 180 journalists in 20 countries had their phones infected by the NSO Group’s spyware underscored the need for urgent action by the international community to tackle the unregulated spread of such technology and to create safeguards for the protection of human rights, including the freedom of the press.

Within the European Union, credible allegations indicate that Pegasus was illegally deployed by Hungarian intelligence or national security services in 2018 and 2019 against at least five journalists, including András Szabó and Szabolcs Panyi from Direkt36, one of Hungary’s last remaining independent media outlets. Fresh revelations surfaced last week when Hungarian media reported that Zoltán Páva, the publisher of the news portal Ezalenyeg.hu and former Member of the European Parliament, had been surveilled using Pegasus as recently as May this year.

Last week it was also revealed that the German Federal Criminal Police Office (BKA) secretly purchased the technology from NSO in 2019. In France, prosecutors are probing allegations that journalists from media outlets including Le Monde, Agence France-Presse and FRANCE 24 were surveilled by Moroccan intelligence services using Pegasus.

The failure to control the acquisition, trade and use of such intrusive technology inside the bloc means that the number of EU member states to have bought Pegasus or other similar cyber-surveillance technology remains unknown. Current estimations may represent the tip of the iceberg. This opacity poses significant threats to journalistic sources, privacy and safety, undermines media freedom and constitutes a clear failure by the EU to close the gaps in its regulatory framework.

As Parliament debates the matter, our organisations again urge the European Commission to conduct an independent and impartial investigation into alleged abuses by the Hungarian authorities against journalists and others. The Commission must establish the extent of Hungary’s use of Pegasus, identify what safeguards have been implemented and react to any abuses. Until such an investigation is carried out, the Pegasus revelations will continue to undermine journalists’ safety and have a chilling effect on what remains of independent media within the country. Robust and effective legal protection must be guaranteed within EU member states against unlawful surveillance by domestic intelligence, national security and law enforcement agencies to guard against human rights violations, including the right to freedom of expression and the right to privacy as protected under domestic, European and international law. 

At the same time, the EU needs to protect journalists from illegal surveillance outside as well as inside its borders. Reports by NSO that suggest that EU member states Cyprus and Bulgaria granted export licenses for its technology are also deeply disturbing. While Cypriot authorities have denied to the Commission that it has any export links with NSO, the assurances remain unsatisfying. Meanwhile, the response from the Bulgarian authorities has yet to be disclosed. The Commission must renew its engagement with the relevant authorities in Sofia to seek immediate clarity. If confirmed, immediate action must be taken to revoke the export license and establish how and when it was granted.

EU member states themselves have a role to play. On September 9, after a decade of negotiation, new EU export controls came into force with the Recast Dual-Use Regulation, which among other things aims to strengthen controls on the international trade of so-called “dual-use” cyber-surveillance tools. The MFRR urges all 27 member states to swiftly implement this landmark regulation and to collaborate in a transparent manner with the Commission on the sharing of information involving the export of such surveillance tools from the customs union.

The subsequent annual report prepared by the Commission under this regulation should act as a much-needed tool for holding the national authorities authorising the sale of this technology to account. It will also lift the veil on the potential sale of spyware tools by commercial actors based in EU member states to authoritarian regimes around the world. For too long the industry has been able to escape proper oversight and regulation. The Commission should closely monitor and enforce states’ adherence to the new rules. Moving forward, more frequent compilation of information and updates about the buying and selling of advanced surveillance tools may be required to address a fast-changing market.

Despite the modest advances in rights protection in relation to the licensing of these technologies for export from the EU subsequent to the entry into force of the recast dual-use regulation, there evidently remains the need for an internationally applicable regulatory framework that can prevent, mitigate and redress the negative human rights impact of surveillance technology. Until this is in place, we continue to call for a global moratorium on the sale and transfer of spyware technology. The European Union should lead the way on pushing for international agreements on the freeze of sales of these cyberweapons around the world.

Signed by:

ARTICLE 19

European Centre for Press and Media Freedom (ECPMF)

European Federation of Journalists (EFJ)

Free Press Unlimited (FPU)

International Press Institute (IPI)

OBC Transeuropa (OBCT)

This statement is part of the Media Freedom Rapid Response (MFRR), an Europe-wide mechanism, which tracks, monitors and responds to violations of press and media freedom in EU Member States and Candidate Countries. This project provides legal and practical support, public advocacy and information to protect journalists and media workers. The MFRR is organised by an consortium led by the European Centre for Press and Media Freedom (ECPMF) with ARTICLE 19, the European Federation of Journalists (EFJ), Free Press Unlimited (FPU), the Institute for Applied Informatics at the University of Leipzig (InfAI), International Press Institute (IPI) and CCI/Osservatorio Balcani e Caucaso Transeuropa (OBCT). The project is co-funded by the European Commission. www.mfrr.eu

Read news by categories:

Related news

Statement

Kosovo: Joint letter to the Prime Minister Albin Kurti on RTK appointment

The Media Freedom Rapid Response (MFRR) and the Safe Journalists Network condemn the shocking physical attack on Albanian journalist Elvis Hila and his wife.

READ MORE
Statement

Albania: MFRR and Safe Journalist Network condemn attack on journalist Elvis Hila and his wife

The Media Freedom Rapid Response (MFRR) and the Safe Journalists Network condemn the shocking physical attack on Albanian journalist Elvis Hila and his wife.

READ MORE
Statement

France: Three journalists summoned by security agency over suspected violation of national defence secrecy

The partner organisations of the MFRR today express concern over the latest summons issued by France’s top security agency to journalists from investigative platform Disclose and Radio France over suspected violation of national secrecy.

READ MORE
Statement

Multiple journalists threatened and harassed in Serbia, authorities must take urgent action

In the past month in Serbia, several journalists have been targeted by serious threats raising fears for their physical safety. Partners of the Media Freedom Rapid Response and the Safe Journalists Network in condemning in the strongest terms the intimidation.

READ MORE
Statement

Albania: Media pluralism and transparency concerns fuel deterioration in media freedom

Following a two-day fact-finding mission to Tirana on 17-18 November 2022, the partners of the Council of Europe’s Platform on Safety of Journalists today publish their findings on press freedom, media pluralism and the safety of journalists in Albania.

READ MORE
Statement

Italy: a call of support for Roberto Saviano, defendant in a defamation trial

Members of the Coalition Against SLAPPs in Europe (CASE), with the support of the coalition’s Italian group and Media Freedom Rapid Response (MFRR), express solidarity with Roberto Saviano who attended the first hearing in the proceedings for aggravated defamation initiated against him by current Prime Minister Giorgia Meloni.

READ MORE