This is already the case in the Netherlands. Hacking tools are only allowed for private use or research, e.g. for checking the security of your own network. Possession of hacking tools with the intention to harm other peoples' systems is not allowed.