Germany Approves Draft Law Lifting Postwar Curbs on Spy Agencies
The German federal cabinet approved a draft law on 2026-08-12 that would lift many postwar restraints on the BND foreign intelligence service and the BfV domestic intelligence service, granting them sweeping new powers including offensive cyber operations and the ability to sabotage weapons production. The legislation, exceeding 700 pages in text, must still pass parliament before it becomes law. The Guardian
Interior minister Alexander Dobrindt described the reform as a security "revolution" and called it "historic." The draft law largely complies with a wishlist drawn up by Germany's foreign and domestic intelligence services themselves, indicating that the legislation reflects the agencies' own operational priorities rather than solely political direction from above.
The reform's guiding principle, or Leitmotiv, is the operational strengthening of the intelligence services, according to the Federal Interior Ministry's own description of the draft law as a fundamental reform of the law governing the intelligence services. The ministry published its legislative page on the Gesetz zur Reform des Nachrichtendienstrechts on 2026-07-06. BMI
The most striking provisions concern offensive operations in cyberspace and physical sabotage. The draft law grants German spies permission to conduct "hack-back" cyber-attacks, including manipulating or deleting data on hostile systems. A proposed Independent Control Council would approve intrusive operations, providing a judicial-style oversight mechanism for the most sensitive activities. The law also includes options for altering instructions on how to build weapons and rendering arms harmless during production, effectively authorizing targeted industrial sabotage. The Guardian; Reuters
The BND, which turned 70 in 2026, is currently run by Martin Jäger, a former ambassador to Ukraine. His appointment to the helm of Germany's foreign intelligence service brought direct diplomatic experience with the Eastern theater into the agency's leadership at a time when the government identified hybrid threats as the primary justification for expanded powers. Reuters reported in February 2026 that Berlin wanted to give its spy agencies broader authority to counter rising hybrid threats.
The legislative push arrives amid a sequence of security incidents on German soil. In late July 2026, a deadly car ramming at Berlin's annual Pride parade was carried out by a German-born Islamist previously known to authorities. In early August 2026, a drone laden with explosives was discovered near a Ukrainian cargo plane at Leipzig airport, a key defence transport hub. The Guardian
The reform also touches a long-standing structural constraint on the BND. German law bans the BND from spying on European Union countries and their citizens, as well as EU institutions, except in specified cases. Reuters This prohibition, rooted in the 2016 reforms that tightened oversight after the BND's mass surveillance controversies, has long been a source of frustration within the agency. Whether the new 700-page draft law alters this EU restriction in any material way is not yet clear from the available materials.
Looking at what this means for Germany's intelligence architecture, the reform amounts to the most consequential rewriting of the BND's and BfV's operational mandates in a generation. The authorization of hack-back operations places Germany in the small group of states that formally permit offensive cyber operations by their intelligence services, alongside the United States, the United Kingdom, and Israel. The weapons-sabotage provisions are more unusual still, blurring the line between intelligence collection and active measures in the physical domain in ways that echo Soviet-era industrial sabotage doctrines more than Western intelligence practice.
The oversight architecture will be the critical variable. The proposed Independent Control Council, if it functions as an ex ante gatekeeper for intrusive operations, could set a precedent for how democracies authorize offensive intelligence actions. But its independence, composition, and operational tempo will determine whether it serves as a genuine check or a procedural rubber stamp. The 700-page text gives parliament a substantial body of detail to scrutinize, but the legislative history of intelligence reform in Germany suggests that security incidents tend to compress parliamentary debate rather than expand it.
The broader context here is a Germany that has spent the past decade incrementally shedding the postwar restraints that distinguished its intelligence culture from those of its allies. The 2016 reforms tightened oversight after scandal; the 2026 reform loosens operational constraints after crisis. Whether the pendulum has swung too far, or not far enough, will depend on outcomes that cannot yet be observed.
