Debate Over German Intelligence Agencies Purchasing Commercial Ad Data

• The German federal government is drafting a reform of the intelligence service laws but has failed to regulate the controversial practice of agencies purchasing commercial advertising and tracking data (ADINT).
• Opposition politicians and data protection experts are calling for strict legal frameworks and parliamentary oversight to prevent the state from bypassing traditional legal hurdles for data collection.
• The federal government maintains that such data is "publicly accessible" and argues that its acquisition does not necessarily require specific new legal authorization, a stance contested by the Federal Commissioner for Data Protection and the Bundestag's own scientific services.

Risks and Security Concerns

• Advertising-based Intelligence (ADINT) involves buying granular location and behavior data from third-party brokers, often collected in violation of the GDPR.
• This data allows for the reconstruction of private life patterns, potentially exposing employees of sensitive government and military sectors.
• Research by Citizen Lab indicates that the online advertising ecosystem can be leveraged not only for passive surveillance but also for active infection of target devices with spyware via malicious ads.

Calls for Reform and Oversight

• Konstantin von Notz (Greens) advocates for a regulated approach that includes effective oversight by the Parliamentary Control Committee, criticizing the current lack of transparency.
• Clara Bünger (Left Party) argues for a strict limit on such practices, insisting that agencies should only use commercial data as a last resort and completely exclude sensitive personal data from any acquisition.
• Experts highlight that other nations, such as the UK, Norway, and the Netherlands, already employ formal approval processes or public transparency reports when intelligence agencies acquire third-party datasets.