Mexico’s military is being ordered to turn over documents related to its alleged use of the controversial spying software known as Pegasus.

That order came from a Mexican transparency agency (INAI) after the Defense Ministry denied a records request for recent contracts with the company Antsua, saying that it could not find responsive documents.

Antsua is the exclusive representative for the NSO Group, the creator of Pegasus, which was implicated in a major surveillance scandal in 2017 in which the phones of prominent Mexican journalists and activists were infected with the malware.

Institute Commissioner Josefina Roman said that releasing the contracts not only serves the interest of transparency around the use of public resources, but also the possible monitoring of private communications. She said the matter touches on issues of privacy and free expression.