Germany Greenlights Sweeping New Cyber Powers for Intelligence Agencies
Germany's cabinet has approved landmark legislation that significantly expands the operational capabilities of its intelligence agencies, allowing them to conduct cyberattacks, sabotage supply chains, and engage in domestic disinformation campaigns. This marks the most extensive overhaul of German spy laws since the post-war era, driven by a perceived increase in national security threats.
Germany's cabinet has given the green light to a groundbreaking legislative package, granting its intelligence agencies unprecedented powers to conduct offensive cyber operations, disrupt adversary supply chains, and disseminate false information to extremist groups within the country. This move represents the most substantial revision of Germany's intelligence laws since the end of World War II, reflecting a shifting geopolitical landscape.
**Nina Warken**, Chancellery chief, elaborated on the scope of these new capabilities. Agencies could now, for instance, introduce faulty components into critical deliveries, utilize cyber operations to disrupt drone manufacturing facilities or chemical weapons laboratories, and neutralize servers operated by hostile state-sponsored hackers and disinformation actors.
### A Sensitive Overhaul in a Changing Threat Environment
Reforming intelligence laws remains a highly sensitive topic in Germany, a nation acutely aware of the historical shadows cast by the **Gestapo** and **Stasi**. However, much like the recent increase in military spending post-Russia's invasion of Ukraine, the German government cites a rapidly evolving threat environment as the primary justification for this legislation.
The comprehensive **732-page bill**, which still requires parliamentary approval, emerges amidst a period of heightened security concerns for Germany, including numerous drone incidents and terrorist attacks.
**Interior Minister Alexander Dobrindt** stated after the cabinet meeting that the government is "expanding the technical capabilities of the intelligence services and granting them active, operational powers," emphasizing the necessity "to be able to take active measures against our attackers and adversaries."
This draft bill specifically redefines the legal frameworks governing both **Germany's foreign intelligence service (BND)** and its domestic counterpart, the **Federal Office for the Protection of the Constitution (BfV)**. Crucially, it also mandates that telecommunications carriers and digital service providers provide assistance to these agencies, with non-compliance potentially leading to fines or service suspensions.
### Limited Powers Compared to Allies
Despite the significant expansion, the proposed powers remain notably more constrained than those exercised by some of Germany's closest allies. The bill explicitly prohibits intelligence agencies from actions intended to endanger a person's life or physical safety, ensuring the **BND** does not acquire paramilitary capabilities akin to France's **DGSE** or the **CIA's Special Activities Center**.
Unlike the more ambiguous legislation in countries like Britain, which features statutory immunity provisions for otherwise unlawful acts abroad, the German draft provides a more narrowly defined set of powers compared to those available in Paris, Washington, and London.
This emphasis on legal clarity aligns with Germany's robust rule-of-law tradition. The reforms are, in part, a response to a **Federal Constitutional Court** ruling that previously struck down a state intelligence law, asserting that surveillance powers must be proportionate to the intrusiveness of the measure.
Under the draft, **BND** disruption operations targeting foreign powers would necessitate a formal declaration from the agency's president, confirming a persistent and systematic threat to German interests. Such declarations would be valid for 12 months and subject to a six-month review. Operations must be directed at the responsible state, not individuals, and conducted outside Germany if equally effective. Telecommunications carriers and digital service providers compelled to assist would receive compensation.
The domestic **BfV** will also gain a new, albeit shorter, list of powers, marking a significant departure from its traditional role. Historically, the **BfV** has primarily focused on intelligence gathering. The new draft would empower it to block or reroute data traffic, alter transmissions in transit, corrupt data intended for malicious plots, and disable equipment poised for an attack. Additionally, it could feed false information to individuals involved in plots within Germany β a domestic disinformation capability currently unparalleled in British, French, or American statutory law.
### Regulating AI in Intelligence Analysis
The bill further breaks new ground by specifically regulating the use of artificial intelligence in intelligence analysis.
It authorizes self-learning systems for intelligence analysis but explicitly bans discriminatory algorithms. Crucially, all machine-generated outputs must be spot-checked under the supervision of an officer qualified to serve as a judge.
The legislation also categorizes certain AI-generated conclusions as intrusions in their own right. Analytical products such as movement profiles, behavioral and personality assessments, and personalized predictions will require additional justifications before an analyst can retrieve them, with the threshold determined by the revealing nature of the output.
A new oversight body will be tasked with reviewing every two years whether new categories of machine-generated output have become similarly revealing, triggering the automatic application of stricter rules.
While opposition parties have voiced various criticisms, the bill is anticipated to pass through parliament, given the governing coalition's majority and its stated aim for the law to be in force next year. Civil liberties groups have indicated their intention to challenge the draft legislation, echoing the **Federal Constitutional Court's** previous stance that intelligence agencies operate at lower legal thresholds than police due to their historical lack of operational powers.