Intelligence service control: "Control must not depend on whether the intelligence service cooperates voluntarily"

A recent ruling by the Federal Administrative Court has significantly impacted the oversight of Germany's Federal Intelligence Service (BND), creating what critics are calling a "control-free zone." The court dismissed a lawsuit brought by the Federal Data Protection Commissioner (BfDI), who sought to compel the BND to grant access to specific operational documents. This decision highlights a critical vulnerability in the current German framework for intelligence agency accountability, raising concerns among human rights and intelligence experts. The case stemmed from the BND's refusal to allow the BfDI to review certain directives, specifically those related to "Computer Network Exploitation" (CNE) measures, which involve hacking into information technology systems. While the BND views these actions as essential for intelligence gathering, the BfDI argued that this refusal prevents effective oversight and undermines the rights of individuals whose data might be compromised. The court's decision effectively shields certain BND activities from independent scrutiny, as the BfDI's ability to enforce data protection rights in this context is now severely limited. This outcome leaves affected individuals with diminished legal recourse, as the secrecy inherent in intelligence operations already makes it difficult for them to ascertain if their rights have been violated. The BfDI, as the sole independent data protection authority, is intended to bridge this gap. However, without the power to compel access to relevant information, its oversight functions become largely theoretical, leading to a situation where specific BND operations may proceed without robust, independent review. Legal experts and privacy advocates have voiced strong criticism, emphasizing that an intelligence agency's cooperation should not be voluntary for effective control to exist. They argue that the Federal Chancellery, which holds ultimate responsibility for the BND, is not an independent enough body to resolve disputes. This situation calls for a legislative response to ensure that meaningful oversight mechanisms are established, preventing the emergence of unchecked operational domains within Germany's intelligence apparatus.