Germany’s Federal Constitutional Court has ruled that the Federal Intelligence Service (BND) overstepped its authority in some aspects of international communications surveillance, deeming parts of its cyber operations unconstitutional. While confirming the need for such cyber activities to prevent major attacks, the court highlighted the necessity for stronger privacy protections, especially for foreign individuals. The government has until December 31, 2026, to implement these changes, emphasizing the importance of judicial oversight for surveillance actions that significantly intrude on personal privacy.