Germany's federal cabinet has approved a sweeping 732-page intelligence reform bill described as the largest overhaul of the country's postwar spy laws. The legislation grants both the foreign and domestic intelligence agencies unprecedented offensive operational powers — a significant departure from Germany's historically restrained approach to state surveillance.
New Powers for the BND (Foreign Intelligence)
The Bundesnachrichtendienst gains authority to:
- Hack foreign computer systems
- Sabotage adversaries' supply chains by substituting faulty or defective components
- Conduct cyber operations against targets such as drone factories and chemical weapons labs
- Disable servers operated by hostile state actors
New Powers for the BfV (Domestic Intelligence)
The Bundesamt für Verfassungsschutz gains authority to:
- Block or reroute data traffic
- Alter transmissions in transit
- Corrupt data being used in plots against Germany
- Disable equipment about to be used in attacks
- Distribute false information to extremists inside Germany — a power reportedly without an equivalent in British, French, or American law
Safeguards Built Into the Legislation
The bill includes several guardrails designed to constrain operational scope:
- Operations are prohibited from endangering human life or physical safety
- The BND president must formally declare a persistent, systematic foreign threat before operations begin
- Operations must target states, not individuals
- Threat declarations expire after 12 months with mandatory six-month reviews
- Telecommunications providers can be compelled to assist and will receive compensation
The bill also introduces AI governance provisions, prohibiting discriminatory algorithms and mandating human oversight of machine-generated intelligence products. Sensitive analytical outputs — movement profiles, behavioral assessments, personalized predictions — require additional justification before retrieval.
Legal and Historical Tensions
Civil liberties groups have announced plans to challenge the legislation in court. The central legal tension rests on a prior Federal Constitutional Court precedent: intelligence agencies operated under lower legal thresholds than police precisely because they lacked operational powers. The new bill inverts that logic entirely.
Germany's historical sensitivities around domestic surveillance — rooted in the Gestapo and Stasi eras — make this legislation politically charged in ways that similar laws elsewhere might not be. The BfV's new domestic disinformation authority is particularly novel; no comparable Western intelligence agency is known to hold a legally codified equivalent.
Geopolitical Context
The government cited a "rapidly changing threat environment" driven primarily by Russia's invasion of Ukraine. Germany has experienced drone incidents, terrorist attacks, and infrastructure threats in recent years. Despite the country's strong rule-of-law tradition and institutional wariness of powerful security services, the government framed the reforms as a security imperative. Implementation is targeted for 2026.
The bill represents a notable shift in the European intelligence posture debate — moving from passive collection toward active disruption as an acknowledged state capability.