It has been revealed that the smartphones used by journalists, human rights defenders and politicians have been spied on using security bugs in operating systems (‘Pegasus’ spyware).

1. Will the Commission propose legislation obliging commercial IT manufacturers to fix vulnerabilities and provide patches within a reasonable time frame after their discovery, and provide for manufacturer liability in the event of a failure to do so?

2. What else could the legislator do to improve the security of mobile devices and mitigate the risk of attacks?

3. The Hungarian authorities are suspected to have monitored the smartphones of journalists and politicians using spyware. How will the Commission address this allegation?