"and surveillance abuses must fully investigate and determine whether the use of Pegasus, similar spyware or other surveillance methods was lawful under domestic law and compliant with the Convention and other international standards. This implies assessing in each individual case whether the interference pursued a legitimate aim under Article 8.2 of the Convention and whether it was strictly necessary in a democratic society and proportionate to that aim. It also means ensuring that all victims of spyware- and surveillance-related abuses have access to effective remedies and redress."