Table B.1. Membership of or signatory to agreements aimed, in whole or in part, at using export controls to regulate spyware and other cyber-surveillance tools

Sources: Authors’ compilation based on the following sources: Wassenaar Arrangement, ‘Introduction’; European Union, ‘EU Countries’, accessed 5 Sep. 2025; US Department of State, ‘Code of Conduct for Enhancing Export Controls of Goods and Technology That Could be Misused and Lead to Serious Violations or Abuses of Human Rights’, 3 Mar. 2023; US Department of State, ‘Joint Statement on Efforts to Counter the Proliferation and Misuse of Commercial Spyware’, 22 Sep. 2024; and UK Foreign, Commonwealth & Development Office, ‘The Pall Mall Process Code of Practice for States’, 25 Apr. 2025.

a EU member states are required to implement the EU dual-use regulation through their national laws and regulations.