Follow us on Google News
Germany’s parliament has approved major changes to the country’s intelligence laws, giving security agencies new powers to hack foreign computer systems, disrupt hostile cyber operations and sabotage infrastructure used by suspected attackers.
The legislation marks a significant expansion of Germany’s intelligence capabilities as the country responds to growing cybersecurity and national security threats.
The Bundestag approved the bill on November 13, 2026, with 308 lawmakers voting in favour, 190 against and 71 abstaining. The legislation follows months of government discussions on strengthening Germany’s ability to respond to foreign cyberattacks.
What New Hacking Powers Will German Intelligence Agencies Get?
The legislation expands the powers of Germany’s foreign intelligence agency, the Federal Intelligence Service (BND), and its domestic intelligence agency, the Federal Office for the Protection of the Constitution (BfV).
Under the new framework, the BND would be authorised to take active measures against threats originating outside Germany. These could include hacking foreign computer networks, disabling servers operated by state-backed hackers and disrupting infrastructure supporting hostile activities.
The proposed powers could also extend to cyber operations targeting drone manufacturing facilities or chemical weapons laboratories considered threats to national security.
Germany’s Interior Minister Alexander Dobrindt described the legislation as a major reform intended to strengthen the country’s intelligence capabilities.
The BfV would receive more limited powers within Germany, including blocking or redirecting data traffic. However, intelligence agencies would remain prohibited from using force against individuals or carrying out operations that endanger human life or physical safety.
Can Intelligence Agencies Use AI and Monitor Digital Communications?
The legislation also provides a legal basis for intelligence agencies to analyse large datasets using artificial intelligence and compare biometric images against information available online. These capabilities could help investigators identify suspicious activities, analyse digital evidence and examine potential security threats.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Both intelligence agencies would also gain authority to require telecommunications providers to temporarily preserve certain data before it can be accessed under the applicable legal conditions.
The BND would be permitted to retain metadata collected through bulk surveillance for 13 months, compared with the previous 12-month limit. The BfV would also receive authority to investigate organised crime groups supporting extremist activities, an area previously handled primarily by police.
The amendments include protections for communications involving Germans, including messages and queries sent to chatbots and search engines.
What Safeguards Will Control the New Surveillance Powers?
The legislation introduces additional oversight requirements intended to prevent intelligence agencies from misusing their expanded authority.
Hacking operations and certain active measures conducted inside Germany would require advance approval from the Independent Control Council, which supervises intelligence activities. The government has also expanded the council from six to twelve members to strengthen oversight.
The reforms come amid concerns over cyberattacks, foreign interference and disinformation campaigns targeting German institutions. German officials have previously linked suspicious cyber activity to threats involving foreign state-backed actors, including attacks against critical infrastructure.
The legislation reflects a shift towards allowing intelligence agencies to intervene directly against hostile cyber operations rather than relying entirely on monitoring and intelligence gathering. However, the expanded surveillance and hacking powers also raise questions about privacy, accountability and the limits of government access to digital information.
Germany’s approach highlights the growing challenge facing governments worldwide: strengthening national cybersecurity while maintaining legal oversight and protecting citizens’ digital rights.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
