CPJ to EU: The time to act on spyware is now