The United Kingdom and France are set to initiate a consultation aimed at curbing the “proliferation and irresponsible use” of commercial cyber intrusion tools. This initiative, part of the Pall Mall Process, seeks to establish guidelines for the ethical use of such tools, including spyware, in a global context.
As part of this consultation, the U.K. government has invited stakeholders—ranging from state representatives to industry organizations and civil society experts—to contribute their insights on best practices for managing commercial cyber intrusion capabilities. The consultation also emphasizes collaboration with the French government, given that the Pall Mall Process is a joint effort between the two nations.
The Pall Mall Process was formalized in a declaration signed during a diplomatic conference in February. The conference, spearheaded by the U.K. and France, brought together a coalition of states, businesses, and civil society, including major corporations like Apple, BAE Systems, Google, and Microsoft. The parties have agreed to reconvene in Paris in 2025 to further their discussions.
Commenting on the initiative, U.K. cybersecurity researcher Andrew Dwyer described the consultation as a “genuine attempt” by both countries to define what constitutes “good practice” in the use of cyber intrusion tools. While Dwyer acknowledges that the consultation alone may not lead to immediate results, he believes it will contribute to the development of broader standards governing the use of these tools.
One of the key challenges of this initiative is reconciling the diverse perspectives on cyber intrusion tools across various communities, Dwyer noted. Last year, the U.K.’s cyber and signals intelligence agency, GCHQ, reported that more than 80 countries had purchased spyware over the past decade. While some of these purchases were for legitimate law enforcement purposes, others were used to target journalists, human rights activists, political dissidents, and foreign government officials.
The Pall Mall declaration highlighted the growing market for cyber intrusion tools as a source of concern, particularly regarding its impact on national security, human rights, and international peace. French policy expert Jérôme Barbier has suggested that conducting intermediary meetings before the 2025 Paris conference could be crucial for the initiative’s success.
As the Paris conference draws nearer, the consultation process is seen as an essential step in shaping future discussions and ensuring that the Pall Mall declaration can be effectively implemented.
