Germany Plans to Expand Spy Agencies’ Hacking Powers Under Sweeping Intelligence Reform

Germany spy agencies hacking powers could expand dramatically under proposed legislation that would allow intelligence services to carry out offensive cyber operations against foreign threats. The draft law would let agencies hack hostile systems, disrupt cyber campaigns, delete data, and conduct online deception as Germany responds to an increasingly complex security environment.

The reforms would mark one of the country’s most significant intelligence overhauls in decades and reflect growing concern over cyberattacks and hybrid operations, particularly those linked to Russia.

Draft Law Shifts Intelligence Services From Observation to Action

For decades, Germany has imposed strict limits on its intelligence agencies to prevent any security service from becoming too powerful. Those restrictions largely confined agencies to collecting intelligence and monitoring potential threats.

The proposed legislation would fundamentally change that approach.

If lawmakers approve the bill, intelligence agencies could infiltrate foreign computer systems, copy or delete data, disable infrastructure used during cyber campaigns, and spread carefully targeted false information to disrupt hostile operations.

Rather than simply tracking attackers, agencies could actively interfere with ongoing cyber campaigns when authorities determine the threat justifies intervention.

Germany Responds to Rising Cyber and Hybrid Threats

Government officials drafted the legislation after warning that cyberattacks, disinformation campaigns, and other hybrid threats have become more frequent and more sophisticated.

The proposal creates a single legal framework covering both Germany’s domestic intelligence agency and its foreign intelligence service. It also introduces several threat categories that determine which investigative powers agencies may use.

Authorities could rely on standard monitoring for lower-risk cases while reserving more intrusive capabilities for incidents involving serious national security threats.

New Surveillance Powers Would Affect Both Agencies and Businesses

The draft law also expands the tools available to intelligence services during cyber investigations.

Authorities could use government spyware for online searches and conduct source telecommunications surveillance under defined legal conditions.

Telecommunications providers, digital platforms, transport operators, and financial intermediaries could also receive confidential disclosure orders requiring them to provide information during investigations.

Companies that refuse to comply could face fines of up to €1 million, along with regulatory inspections.

Independent Oversight Would Remain Part of the Reform

Although the proposal grants broader authority to intelligence services, it also introduces stronger oversight.

The government plans to establish an Independent Control Council that would replace several existing supervisory bodies with a single authority.

The council would review and approve the most intrusive operations before they begin, including long-term undercover missions, home surveillance, and other highly sensitive intelligence activities.

The draft also provides clearer rules for confidential informants. In exceptional circumstances involving the gravest national security threats, agencies could recruit informants as young as 16.

Germany Spy Agencies Hacking Powers Would Mark a Historic Shift

If Parliament passes the legislation, Germany spy agencies hacking powers will extend far beyond traditional intelligence gathering. Security services would gain the legal authority to disrupt hostile cyber operations instead of simply observing them.

Supporters argue the reforms will strengthen Germany’s ability to defend against foreign cyber threats. Critics, however, are expected to closely examine whether the expanded powers strike the right balance between national security, government oversight, and individual privacy.