The Dutch government announced a draft bill on Friday (August 28, 2026) that aims to significantly expand the powers of the national security agency (AIVD) and military intelligence agency (MIVD), allowing them to take more direct action in response to cyber attacks and espionage activities from “significant hostile forces” such as China, Russia, and Iran.
Under this new legislation, intelligence agencies will no longer need to obtain administrative approval step by step when tracking individual hackers or potential spies online.
Defense Minister Dilan Yeşilgöz-Zegerius stated at a press conference in The Hague, “By the time we get approval, they would have already fled. With this law, our blade is even sharper.”
The new legislation establishes a new authorization system: once a foreign intelligence agency is officially designated as a hostile force by the Dutch government, intelligence agencies can proactively investigate any suspected personnel working for them. The review mechanism will be carried out by an independent supervisory body for post-checks, with the authority to halt related actions if enforcement is deemed excessive.
The background of this legislation stems from the increasingly deteriorating security environment in the Netherlands. A report previously released by the Dutch national security agency (AIVD) warned that the Netherlands is facing its most complex and serious national security threats since the end of World War II, including Sino-Russian cooperation, AI-enhanced cyber attacks, and commercial espionage targeting key supply chains.
As the home to global chip equipment giant ASML Holding NV, the advanced high-tech industry in the Netherlands has become a prime target for foreign intelligence agencies. ASML has previously accused a Chinese competitor of infringing on its trade secrets.
Prime Minister Rob Jetten specifically mentioned the cyber threats from China, stating, “Due to our highly advanced economy and technology, the Netherlands has become a key target for espionage and sabotage activities.”
The new law also authorizes intelligence agencies to engage in closer cooperation with banks, universities, online platforms, and telecommunication providers in the Netherlands, not only to alert them to security risks but also to demand data from these entities under specific circumstances.
This move replaces the previous cabinet’s abandoned plan to scrutinize 8,000 foreign researchers and students due to its infeasibility. Meanwhile, inspired by the intelligence quick transmission needs on the Ukrainian battlefield, the legislation also allows intelligence agencies to directly provide raw operational data to the Dutch armed forces to enhance efficiency.
Addressing privacy concerns, Yeşilgöz-Zegerius emphasized, “Putin and his cronies do not deserve our privacy, but the Dutch people do.”
The draft bill is currently undergoing public consultation and will subsequently be submitted to the Dutch parliament for discussion and voting.