UK and France seek views on commercial cyber intrusion industry practices
Source: gov.uk (2025-11-20)

The UK and France are launching this private consultation under the Pall Mall Process, an international and multistakeholder initiative to stop the threat posed by the proliferation and irresponsible use of commercial cyber intrusion capabilities.

The Pall Mall Process is consulting on good practice for organisations operating in and around the market for commercial cyber intrusion capabilities.

The UK and France are launching this private consultation under the Pall Mall Process, an international and multistakeholder initiative to develop solutions through which to address the threat presented by the proliferation and irresponsible use of commercial cyber intrusion capabilities.

The Process was launched at Lancaster House in February 2024, when a coalition of states, businesses and civil society came together to discuss the issue. They published the Pall Mall Process Declaration (https://www.gov.uk/government/publications/the-pall-mall-process-declaration-tackling-proliferation-and-irresponsible-use-of-commercial-cyber-intrusion-capabilities), also available in French: Processus de Pall Mall (https://www.diplomatie.gouv.fr/fr/politique-etrangere-de-la-france/securite-desarmement-et-non-proliferation/actualites-et-evenements-lies-a-la-securite-au-desarmement-et-a-la-non/2024/article/processus-de-pall-mall-lutter-contre-la-proliferation-et-l-usage-irresponsable)

In April 2025, following an extensive multistakeholder consultation and negotiation, the Pall Mall Process agreed a Code of Practice for States (https://www.gov.uk/government/publications/the-pall-mall-process-code-of-practice-for-states), which sets forth political commitments and practical recommendations to address irresponsible use of commercial cyber intrusion capabilities and promote responsible behaviour across the cyber intrusion market. The Code of Practice for States has been supported by over 27 countries.

The UK and France are committed to working with the global multistakeholder community to implement policy options and new practices, track progress, and develop a shared picture for responsible practice. This includes the development of complementary guidelines for the commercial cyber intrusion industry to ensure the responsible development, sale and operation of these powerful capabilities.

Through this consultation we invite stakeholders to share views on good practice for organisations operating in and around the market for commercial cyber intrusion capabilities. We welcome responses from those in the industry themselves, as well as other stakeholders with relevant views and expertise.

The consultation will close on Monday 22 December 2025.

If you would like to take part in the consultation, you can register to participate by providing your contact details (https://submit.forms.service.gov.uk/form/3948/register-your-interest-in-the-pall-mall-process/13318). You will then be provided with the consultation questionnaire.

Note:

we may share your details with our partners in the French government, as the Pall Mall Process is a joint initiative

responding to the consultation questionnaire does not represent a formal commitment to the Pall Mall Process, nor membership of the initiative, nor does it guarantee future involvement