Germany is done playing nice in the shadows. For decades, the country's intelligence agencies operated with one hand tied behind their backs, bound by strict post-World War II and Cold War limitations designed to prioritize absolute data privacy over active defense.
That cautious era just died.
The German government approved a sweeping legislative overhaul giving the Federal Intelligence Service (BND) and the domestic intelligence agency (BfV) aggressive new powers to hack foreign servers, disrupt active cyberattacks, and counter foreign sabotage. Interior Minister Alexander Dobrindt called it a brand-new chapter for agencies that were previously restricted strictly to passive information gathering.
Why Germany Had No Choice
You can't understand this massive shift without looking at what's been happening on the ground. Berlin is a daily target for hybrid warfare. We are talking about foreign espionage, state-sponsored disinformation campaigns, and low-level proxy operatives committing acts of sabotage.
The wake-up calls haven't been subtle. Recently, authorities discovered an explosive-laden drone sitting near a cargo area at Leipzig/Halle Airport—a critical logistics hub heavily utilized for military and humanitarian shipments tied to Ukraine. Incidents like that make it impossible for officials to pretend traditional defense methods are enough.
Chancellor Friedrich Merz’s administration realized that relying on intelligence tips from foreign allies had become a dangerous one-way street. When you're constantly waiting for Washington, London, or Paris to hand you threat assessments because your own laws prevent you from hacking back, you're sitting ducks.
Inside the New Intelligence Powers
The approved draft legislation grants the BND and BfV tools that would have been completely unthinkable in Berlin just a few years ago.
- Active Counter-Hacking: The BND can now legally manipulate the IT infrastructure of foreign actors while an active cyber or disinformation attack against Germany is underway.
- Cross-Border Surveillance: Agencies get extended authority to maintain network and device surveillance inside Germany if a target tracked abroad temporarily crosses the border.
- Device Access: Security services gain broader leeway to access laptops, cellphones, and encrypted digital channels to intercept plots before they materialize.
These changes shift German intelligence from a reactive analytics bureau into a functional, competitive security apparatus capable of standing shoulder-to-shoulder with international counterparts.
The Historical Baggage Germany Is Shedding
Why did it take this long? The answer is simple: historical trauma.
Modern Germany built its entire constitutional framework around strict protections against state surveillance. The horrors of Nazi Gestapo surveillance followed by the totalitarian paranoia of East Germany's Stasi created a deep-seated cultural aversion to powerful secret police forces. Privacy wasn't just a preference; it was a sacred constitutional shield.
Critics still worry about civil liberties. Data protection advocates argue that expanding digital surveillance opens the door to mission creep. Yet, the political consensus shifted dramatically once lawmakers accepted that hostile actors don't care about data privacy laws when launching hybrid attacks.
Nina Warken, Chancellor Merz's chief of staff, put it bluntly: Germany is constantly targeted by foreign powers, and the threat is acute.
What Comes Next for European Security
The legislation still needs to pass through parliament, but with the current coalition backing it fiercely, it is expected to clear legislative hurdles and take effect early next year.
Expect other European nations to watch this transition closely. As hybrid threats from actors like Russia and other hostile states escalate across the continent, Germany’s pivot away from passive observation marks a definitive turning point for European security architecture. The cloak-and-dagger era of German defense has officially arrived.
