German Intelligence Reform: A Massive Expansion of Surveillance Powers

• The German Interior Ministry has unveiled a 700-page draft bill to significantly expand the powers of the Federal Office for the Protection of the Constitution (BfV) and the Federal Intelligence Service (BND).
• The reforms aim to modernize intelligence capabilities against emerging threats, address Federal Constitutional Court rulings, and streamline oversight.
• The proposal blurs the line between intelligence agencies and law enforcement while drastically increasing hacking, AI, and surveillance capabilities at the expense of transparency.

Expanded Powers and Surveillance

• Hacking and Active Intervention: Agencies are authorized to perform 'hackbacks,' allowing them to modify, delete, or redirect data in IT systems during perceived imminent threats. The BND will receive proactive intelligence on zero-day vulnerabilities from the BSI to facilitate these attacks.
• AI and Automated Analysis: The bill grants explicit permission for automated processing of personal data, including the use and training of AI models to assess individual threat potential.
• Biometrics and Public Surveillance: The BfV is permitted to access live public video feeds to perform real-time biometric matching. The BND can analyze biometric data from the internet, including areas behind access barriers.
• Strategic Reconnaissance: The BND may monitor internet nodes, capturing up to 15% of total data volume. Given the high traffic at nodes like DE-CIX, this effectively allows for massive interception of domestic communications.

Oversight and Transparency

• Consolidated Oversight: The G-10 Commission will be abolished, with its duties folded into the Independent Control Council (UKRat). This body will now oversee both domestic and foreign intelligence, essentially acting as an administrative court for intensive surveillance measures.
• Reduced Accountability: The bill removes all intelligence activities from the scope of the Freedom of Information Act, including previously accessible environmental data. Even administrative statistics on personnel training will be classified to prevent 'hostile actors' from assessing German intelligence capacity.
• Marginalized Data Protection: The centralization of oversight under the UKRat is expected to limit the reach of the Federal Commissioner for Data Protection, confining them to non-sensitive administrative functions.