There was illegal use of spyware in Poland, Hungary, Greece and Spain and suspicions about Cyprus, while other EU member states made it easy for the shady industry to operate.