Data Security
,
General Data Protection Regulation (GDPR)
,
Standards, Regulations & Compliance
Use Other Than for Police Purposes Can Invoke Fine Up to 20 Million Euros
The Italian privacy regulator warned against unlawful uses of Graphite spyware following reports of mass hacking campaigns using the tool.
The Italian Data Protection Authority published a warning targeting commercial spyware developed by Israeli firm Paragon Solutions after receiving multiple complaints that it violates European privacy law.
The action comes after reports the application was used to compromise the WhatsApp accounts of 90 journalists and other members of civil society in more than two dozen countries. The Italian government said the group included seven Italian citizens.
“Interceptions of electronic communications that do not fall within the purposes of security of the Republic and of prevention, investigation, detection and prosecution of crimes, must comply with the legislation on the protection of personal data,” the data regulator said on Friday. Non-compliance can invoke of fine of 20 million euros or 4% of the annual turnover.
WhatsApp did not disclose further details regarding the attacks but told The Guardian it disrupted hacking attempts using Graphite in December.
Meta, WhatsApp’s parent company, further sent a cease and desist notice to the Israeli company, and is exploring legal actions against Paragon, the Guardian reported.
Paragon was founded by Ehud Barak, a former prime minister. It was recently acquired by American private equity firm AE Industrial for $900m.
Graphite, whose capabilities are estimated to be on par with the NSO group’s Pegasus software, is a zero-click application that can intercept messages from encrypted services like WhatsApp, Telegram and Signal. The company did not respond to a request for comment, although a Paragon spokesperson told The Guardian it has around 35 government customers.
The Italian government is believed to be among Paragon’s customers. Media reports have circulated that the Israeli firm ended its contract with the Italian government, something that Rome says is untrue.
“Paragon has never suspended the service and has not terminated its contract,” said Alfredo Mantovano, secretary of the Council of Ministers.