Dutch Spy Agencies Get New Powers to Track Foreign Adversaries: What Expats Need to Know

The Dutch government published a draft law on 28 August 2026 that will give the AIVD (Algemene Inlichtingen- en Veiligheidsdienst, the domestic intelligence service) and the MIVD (Militaire Inlichtingen- en Veiligheidsdienst, the military intelligence service) far-reaching new powers to track and disrupt foreign adversaries such as Russian hackers, Chinese spies and Iranian operatives without needing prior approval for each operation. For expats and internationals living in the Netherlands, the changes raise questions about privacy, data sharing with banks and online platforms, and the potential for incidental monitoring of foreign residents.

What the law changes

Under the current framework, the intelligence services must obtain permission from the minister before targeting an individual. The new law removes that requirement once a foreign service is formally designated as an adversary. Defence Minister Dilan Yesilgöz explained the rationale: “By then they have already gone.” She added that the bill “will make our knife sharper” (NL Times).

Instead of pre-approval, an independent watchdog — the Review and Oversight Council — will check operations after the fact. The watchdog can halt any actions it considers unlawful. The bill also allows the agencies to cooperate more closely with banks, universities and online platforms, and to demand data from them. Interior Minister Pieter Heerma, who is responsible for the AIVD, declined to name specific organisations but said the threat from countries like Russia, China and Iran “has become significantly more complex” and targets every part of Dutch society (DutchNews.nl).

What this means for you as an expat

If you hold a residence permit, you are not automatically a target. The law is aimed at individuals working for foreign intelligence services — not at ordinary residents. However, the new powers raise practical concerns:

• Data sharing: Online platforms and banks will be legally obliged to share data with the AIVD/MIVD on request. If you use Dutch banking or digital services, your information could be caught up in a broader investigation, even if you are not a suspect.
• Incidental monitoring: The agencies can pursue anyone believed to be working for a designated adversary. If you happen to communicate with such a person — for example, a colleague from a high-risk country — your data could be swept up. The government says oversight will prevent abuse, but the ex post facto model means monitoring happens first, review later.
• Privacy protections: Yesilgöz stated: “Putin and his cronies do not deserve our privacy, but the people of the Netherlands do” (DutchNews.nl). The bill retains the same high requirements for using powers, according to the cabinet, but privacy advocates worry about the lack of upfront judicial approval.

Context and next steps

The draft law replaces the existing Wii (Wet op de inlichtingen- en veiligheidsdiensten) from 2017, which the government says is outdated given the speed and sophistication of modern threats. The previous cabinet’s plan to screen 8,000 foreign researchers for espionage risks was abandoned as unworkable; this new approach is more targeted but also more sweeping in scope.

The bill now enters a public consultation period, after which it will be sent to the Tweede Kamer (the lower house of parliament) for debate. A “state of emergency” provision allows ministers to activate even broader powers if the Netherlands becomes involved in a “large-scale conflict,” but that requires parliamentary approval.

For expats, the key takeaway is that the Dutch intelligence landscape is becoming more proactive and less constrained by prior approval. If you value your digital privacy, you may want to follow the parliamentary debate and consider how the new data-sharing obligations affect your online footprint. The public consultation — open to everyone — is one way to make your voice heard.

Sources: NL Times, DutchNews.nl, NU.nl