EDRi’s position paper addresses the challenges posed by state use of spyware in the EU, and the dangers of the proliferation of commercial spyware. The paper concludes that the only human-rights compliant approach is a full ban.