Germany Approves Draft Law Expanding Intelligence Agencies’ Cyber and Disruption Powers

BERLIN, Germany — August 12, 2026 — Germany’s cabinet has approved sweeping legislation that would authorize the country’s intelligence agencies to conduct cyber operations, disrupt hostile infrastructure, interfere with foreign supply chains and take direct action against certain threats inside Germany.

The 732-page draft represents one of the most extensive proposed overhauls of German intelligence law in the postwar era. It would significantly expand the operational authority of the Federal Intelligence Service, known as the BND, and the Federal Office for the Protection of the Constitution, known as the BfV.

Cabinet approval does not enact the proposed powers. The legislation must still complete the parliamentary process before becoming law, and its provisions could be amended during that process.

Head of the Federal Chancellery Nina Warken said the proposed authorities would allow Germany’s intelligence services to move beyond information collection and take active measures against serious foreign threats.

Federal Interior Minister Alexander Dobrindt said the government intends to expand the intelligence services’ technical capabilities and provide them with active operational powers against attackers and adversaries.

The proposal would move Germany’s intelligence agencies beyond their traditional emphasis on collecting, assessing and distributing information. The BND could receive authority to penetrate foreign computer systems, manipulate infrastructure and conduct disruption operations against foreign states accused of persistently and systematically threatening German interests.

Before expanded BND operations could proceed, the agency’s leadership or its representative would have to issue a framework order identifying the specific threat, the type and scope of permitted measures, the duration and the justification. The order could remain in effect for no more than 12 months, while the BND would have to review whether the threat continued at intervals of no more than six months.

Operations would generally have to be directed against the foreign power responsible for the threat and could not be aimed at uninvolved private individuals in that capacity. Measures would generally have to occur outside Germany unless action abroad were impossible or less effective.

The proposed authority could permit the BND to disable malicious servers, interfere with infrastructure supporting cyberattacks, corrupt equipment intended for hostile use or obstruct the production and delivery of material connected to a foreign threat.

Those powers would remain subject to explicit physical-safety limits. The legislation would prohibit intelligence operations intended to endanger a person’s life or physical well-being, separating the proposed disruption authority from the paramilitary capabilities exercised by some foreign intelligence services.

Telecommunications carriers and digital service providers could be required to assist BND operations authorized under the expanded powers, with private entities receiving reasonable compensation based on their documented costs. Separately, specified BfV provider obligations could be enforced through coercive fines of up to €1 million and, as a last resort, a partial or complete prohibition on the company’s operations.

The BfV, which concentrates on threats to Germany’s constitutional order, would receive a narrower set of operational powers for use inside the country. The agency has traditionally focused on gathering intelligence rather than directly interfering with suspected threat activity.

Under the proposal, the BfV could block or reroute data traffic, alter transmissions while they are moving through communications systems, corrupt stored data intended for use in a planned attack and disable equipment positioned for imminent deployment.

The domestic agency could also provide false information to people involved in extremist or security-related activity. The proposed authority would permit targeted deception intended to disrupt planning, interfere with coordination or prevent individuals from relying on accurate operational information.

Granting a domestic intelligence service authority to alter communications and introduce false material raises significant legal and civil-liberties questions. The consequences could extend beyond surveillance because the agency would be permitted to influence the information available to a target rather than only observe the target’s conduct.

Germany’s historical experience with the Gestapo under Nazi rule and the Stasi in East Germany has shaped strict legal limits on domestic intelligence activity. The proposed reforms attempt to establish detailed statutory rules for operations that have traditionally remained outside the BfV’s primary mission.

The legislation also responds to constitutional requirements established by Germany’s Federal Constitutional Court. The court ruled that intelligence authorities must be calibrated according to the intrusiveness of the powers they exercise and the effect those measures can have on fundamental rights.

That distinction becomes more difficult when an intelligence organization receives authority to alter data, disable equipment or interfere with an active operation. Powers that directly affect systems and conduct can produce consequences closer to law-enforcement intervention than conventional intelligence collection.

The draft also establishes rules governing the use of artificial intelligence and self-learning systems in intelligence analysis. German agencies would be authorized to use those systems to process data, identify relationships and generate analytical assessments.

Discriminatory algorithms would be prohibited. The proper functioning of each AI application would have to be checked on a sample basis under the supervision of a BND employee qualified to hold judicial office.

The proposal recognizes that some analytical products can become intrusive even when the underlying information was lawfully collected. Movement profiles, behavioral assessments, personality evaluations and individualized predictions could reveal details that are more sensitive than any single record used to generate them.

Analysts seeking access to those products would have to satisfy additional legal requirements based on how much the automated conclusion reveals about the person concerned. The restriction would apply to the generated inference rather than only the original data.

The Independent Control Council would have to review compliance with the data-protection rules governing high-impact analytical products at least every two years. If it determined that other automatically generated products were equivalent in intrusiveness and personality insight, those products would become subject to the same stricter access requirements.

The legislation arrives as Germany confronts cyberattacks, sabotage concerns, extremist activity, drone incidents and threats linked to foreign states. The government argues that intelligence agencies require operational tools capable of interrupting hostile activity before it produces greater damage.

Critics contend that the proposal risks weakening long-standing boundaries between intelligence collection, law enforcement and covert action. Civil-liberties groups and opposition lawmakers have raised concerns about the proposal’s implications for privacy, fundamental rights and the rule of law. Its provisions could eventually face review by the Federal Constitutional Court if enacted and challenged.

The governing coalition holds a parliamentary majority and has stated that it wants the new intelligence framework in force in 2027. Until the legislative process is completed, the hacking, disruption, supply-chain interference and domestic deception authorities remain proposed powers rather than operational law.

---

German Federal Ministry of the Interior — Ministerial Draft of an Act to Reform Intelligence Service Law, revision dated July 5, 2026. (Free Download)

---

---

---

Federal Government of Germany — Government Draft of an Act to Reform Intelligence Service Law, approved by the federal cabinet on August 12, 2026. (Free Download)

---

---

---

German Federal Ministry of the Interior — Legislative Procedure: Act on the Reform of Intelligence Service Law, English-language overview. (Free Download)

---

---

---

Federal Constitutional Court of Germany, First Senate — Decision of October 8, 2024, Case Nos. 1 BvR 1743/16 and 1 BvR 2539/16. (Free Download)

---

---

---

---

---

---

---

---

---

---

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

---

---

---

---

---