“Revelations regarding the apparent widespread use of the Pegasus software to spy on journalists, human rights defenders, politicians and others in a variety of countries are extremely alarming, and seem to confirm some of the worst fears about the potential misuse of surveillance technology to illegally undermine people’s human rights.

“Various parts of the UN Human Rights system, including my own Office, have repeatedly raised serious concerns about the dangers of authorities using surveillance tools from a variety of sources supposed to promote public safety in order to hack the phones and computers of people conducting legitimate journalistic activities, monitoring human rights or expressing dissent or political opposition...

“Given the fact that Pegasus spyware, as well as that created by Candiru and others, enable extremely deep intrusions into people’s devices, resulting in insights into all aspects of their lives, their use can only ever be justified in the context of investigations into serious crimes and grave security threats...

“Companies involved in the development and distribution of surveillance technologies are responsible for avoiding harm to human rights. They need to take immediate steps to mitigate and remedy the harms their products are causing or contributing to, and carry out human rights due diligence to ensure that they no longer play a part in such disastrous consequences, and avoid being involved in similar future scenarios.

“In addition to immediately stopping their own role in violations of human rights, States have a duty to protect individuals from abuses of the right to privacy by companies. One key step to effectively prevent abuse of surveillance technology is for States to require by law that the companies involved meet their human rights responsibilities, are much more transparent in relation to the design and use of their products, and put in place more effective accountability mechanisms.

“These reports also confirm the urgent need to better regulate the sale, transfer and use of surveillance technology and ensure strict oversight and authorisation. Without human rights-compliant regulatory frameworks there are simply too many risks that these tools will be abused to intimidate critics and silence dissent.

“Governments should immediately cease their own use of surveillance technologies in ways that violate human rights, and should take concrete actions to protect against such invasions of privacy by regulating the distribution, use and export of surveillance technology created by others.”