[Fortune] In the world of online spying, great power lies with those who can get their hands on the data flowing through the world’s Internet infrastructure. So the fact that Germany is home to one of the world’s biggest Internet exchange points—where data crosses between the networks that make up the Internet—has given a lot of power to the country’s equivalent of the U.S. National Security Agency.The Bundesnachrichtendienst, or BND, gets to freely sift through all the foreign traffic passing through that exchange junction in search of nuggets that can be shared with overseas partners such as the NSA. But now that power is in jeopardy, thanks to a Tuesday ruling from Germany’s constitutional court.
The case was brought about by journalists who report on human rights in conflict zones. They don’t want German spies potentially identifying their sources there and sharing that information with other countries.
Germany’s Federal Constitutional Court ruled that foreigners also benefit from privacy protections under Germany’s constitution, so the surveillance conducted on them by Germany’s spy agency needs to respect their rights.
The legislation in question, which was introduced in 2016, does nothing of the sort. Indeed, those rules trample over foreigners’ rights in a variety of ways, the court said: They allow mass surveillance rather than targeted surveillance; there’s not enough oversight of the spying; there are no protections for journalists and lawyers, as there should be; and there aren’t enough restrictions or safeguards when it comes to sharing the information with the likes of the NSA.
The court said it was possible to have a constitution-compliant law governing the surveillance of foreigners in other countries, so the German government has until the end of 2021 to make the necessary adjustments.
THE FRANKFURT CONNECTION
Germany's signals intelligence agency‐the Bundesnachrichtendienst, or BND‐has had an information-sharing deal with the NSA since soon after 9/11. After NSA contractor Edward Snowden in 2013 spilled the beans about the American agency's international partnerships, it emerged that the NSA had been directing the BND to gather information on high-profile targets such as the European Aeronautic Defence and Space Company, and the administrations of France and Austria.
This triggered a parliamentary inquiry in Berlin, which revealed a lot about the BND's tapping of the data flowing through the DE-CIX Internet exchange point in Frankfurt (the world's second-largest Internet exchange point, after the Brazil Internet Exchange). DE-CIX's operators complained that the BND was supposed to monitor only a fifth of the traffic passing through but was actually scooping up the whole lot....