Breach of Document Custody by Public Officials in Spain: Arts. 413-416 CP

A missing case file, a deleted shared folder or a document withdrawn from an administrative archive may end in a disciplinary file or in an investigating court, with a penalty that includes the permanent loss of the post. Which of the two follows depends on very specific elements of the offence. As criminal defence lawyers in breach of document custody cases, we set out what Art. 413 of the Spanish Criminal Code (CP) actually requires, what counts as a document and as custody entrusted by reason of office, and where this offence ends and forgery, computer damage or acting as an accessory begin.

You are accused of removing or destroying a case file: what happens next

These cases almost never start with a complaint by an injured party. They start inside the administration itself: a report from the affected unit, a systems audit, or the discovery that documents are missing when a court order has to be answered. That is why the person under investigation usually learns of it through two channels at once — the summons from the investigating court and the opening of a disciplinary file — and why both fronts advance over the same facts and the same documents.

It is worth measuring early what is at stake, because it does not end with imprisonment. The penalty under Art. 413 CP is composite and imposed cumulatively: imprisonment, fine and special disqualification are added together, with no option for the court to choose among them, and that disqualification produces, under Art. 42 CP, the permanent loss of the post, including at the lowest end of the range. Against that, the investigation is fought on narrow, verifiable ground: whether the document was genuinely in custody entrusted by reason of office, whether what happened was removal, destruction or concealment rather than an archiving failure, and whether an authorised disposal schedule or an instruction covered what was done. That is proved with audit trails, minutes and retention rules.

What to do (and what not to do) about the parallel disciplinary file

• Treat both fronts as one from day one. The disciplinary proceedings are usually stayed pending the criminal case and the administration is bound by the facts the judgment declares proven; but whatever you assert in your written defence will end up being read in court.
• Ask in writing for the audit trail before it is gone. Access logs, version control, backups and the profile-and-permissions matrix have their own retention periods: requested late, they no longer exist, and with them goes the evidence that the document was preserved or that other people had the same access.
• Gather the rule that covered what was done. Retention schedule, disposal decision, service order or archiving protocol. Art. 415 CP requires that access occur "without due authorisation": establishing the authorisation defeats the charge on its own ground.
• Do not go back into the repository or "tidy up" the folder. Any later access is logged and reads as tampering, even where the intention was to reconstruct what was missing.
• If the document turns up, do not return it yourself. Do it through formal channels and with a written record of who hands over what, when and to whom: a return with no documentary trace destroys the very evidence of good faith it was meant to supply.
• Do not make a statement without having examined the proceedings. Art. 118.1 LECrim gives you the right to examine the case file before your statement is taken and to remain silent, and Art. 775 LECrim the right to speak with your lawyer in private. In these cases the first explanation of what happened to the file is fixed on the record and shapes everything after it.

The Four Offences in Chapter IV

Art. 413 CP is the basic offence. It punishes the authority or public official who, knowingly, removes, destroys, renders useless or conceals, wholly or in part, documents whose custody has been entrusted to them by reason of their office, with imprisonment of one to four years, a fine of seven to twenty-four months and special disqualification from public employment or office for three to six years. The four verbs describe different results, and the phrase "wholly or in part" extends the offence to the disappearance of a portion of the file.

Art. 414.1 CP protects not the document but the measures put in place to prevent access to documents whose access the competent authority has restricted. It punishes the official entrusted with that custody by reason of office who knowingly destroys or disables those measures, or consents to their destruction or disabling, with six months to one year in prison or a fine of six to twenty-four months and, in any event, special disqualification from public employment or office for one to three years. Art. 414.2 CP punishes the private individual who destroys or disables those measures with a fine of six to eighteen months.

Art. 415 CP deals with improper access: it punishes the authority or official not covered by the preceding article who, knowingly and without due authorisation, accesses or allows access to secret documents entrusted to their custody by reason of office, with a fine of six to twelve months and special disqualification from public employment or office for one to three years. The offence is complete on access, without the information having to be disseminated. The chapter closes with Art. 416 CP, which imposes the immediately lower prison or fine penalties on private individuals accidentally entrusted with the handling or custody of documents by commission of the Government or of the authorities or officials to whom they were confided. It fits modern outsourcing scenarios, and its wording refers to prison and fine penalties, not to disqualification.

What Counts as a Document and as Custody by Reason of Office

The Criminal Code defines the term in its general part. Under Art. 26 CP, a document is any material medium expressing or incorporating data, facts or accounts having evidential value or any other kind of legal relevance. Paper is not mentioned: what matters is the evidential value or legal relevance of the content, so the electronic document is fully covered, and with it the case file processed digitally, entries in a register and official correspondence recording legally significant action.

That dimension has changed the practical profile of the offence. The spread of the electronic case file as the ordinary means of administrative processing — its general framework being Law 39/2015 on the Common Administrative Procedure of Public Administrations — shifts the argument from the physical archive to document management systems: who held an access profile, what operations the audit trail records, whether backups existed, whether the deletion was reversible. Digital evidence becomes the centre of the case.

The second normative element is custody entrusted by reason of office. Having handled the document, or having been able to reach it, is not enough: the offence requires a functional relationship, meaning that the staffing structure, the allocation of duties or the assignment of a system profile placed that document within the official's responsibility. Someone who accesses a file that does not fall within their duties does not thereby commit the offence under Art. 413 CP. Mapping the scope of custody — which documents, over what period and to what extent — is one of the first tasks of the defence, and often the most productive.

The Mental Element: Acting "Knowingly"

Arts. 413, 414.1 and 415 CP all use the word "knowingly". It is not decorative: it is a restriction on the mental element, read as a requirement of direct intent, so that the official must know the object is a document under their custody by reason of office and must want the result. To this is added Art. 12 CP, under which negligent acts and omissions are punished only where the law expressly so provides, and no provision in the chapter contains a negligent form. The consequence is straightforward: careless loss is not a crime, and neither is a filing error, destruction carried out through misapplication of a retention schedule, or accidental deletion during a systems migration. All of that may give rise to disciplinary liability, but it falls outside the Criminal Code.

The real battleground in these cases is therefore proof of intent, almost always circumstantial: the timing of the disappearance in relation to a formal request, an inspection or an appeal; how selective the deletion was; whether anyone stood to gain from the document not being found. The defence works the same materials in the opposite direction: internal protocols, instructions received, documented IT incidents and the activity of third parties with access to the same repository.

Who Can Commit the Offence, and the Position of Private Individuals

These are special offences: the range of possible principals is limited by the status of the perpetrator, defined in Art. 24 CP. An authority is anyone who, alone or as a member of a corporation, court or collegiate body, holds command or exercises jurisdiction of their own. A public official is anyone who, by immediate provision of law, by election or by appointment of a competent authority, takes part in the exercise of public functions: a concept broader than the administrative one, which does not depend on the employment relationship and calls for individual analysis where contract staff, interim staff or staff of instrumental entities are involved.

Where a private individual is involved, the first answer is Art. 416 CP. Outside that scenario the individual may be liable as an instigator or necessary accomplice (Art. 28 CP) or as an accessory (Art. 29 CP), subject to a decisive sentencing rule: Art. 65.3 CP allows the courts to impose the penalty lowered by one degree where the instigator or necessary accomplice lacks the personal conditions, qualities or relationships underpinning the principal's culpability. This extraneus problem is examined in our article on the differences between malfeasance and influence peddling and the position of the extraneus. To this should be added Art. 31 CP, under which anyone acting as de facto or de jure director of a legal person, or on behalf of another, is personally liable even though the conditions required by the offence are absent in them, provided they are present in the entity represented.

Boundaries with Neighbouring Offences

A charge under Art. 413 CP rarely reaches court on its own. Forgery by a public official under Art. 390 CP — three to six years in prison, a fine of six to twenty-four months and special disqualification of two to six years — punishes altering a document in essential elements, simulating it wholly or in part, representing the involvement of persons who did not take part, or misrepresenting the facts in the narrative: it operates on the content. Art. 413 CP operates on the document's existence or availability; making a document disappear does not forge it, which is why concealment cannot simply be recast as forgery, even though the two may follow one another.

Disclosure of secrets and information under Art. 417 CP punishes dissemination, not disappearance: revealing secrets or information known by reason of office that should not be divulged, with a base penalty of a fine of twelve to eighteen months and special disqualification of one to three years, aggravated where serious harm results and where the secrets belong to a private individual. The boundary with Art. 415 CP is conceptually clear — accessing or allowing access as against revealing; the regime is examined in our article on the disclosure of secrets and information by public officials, and the comparison with the offences committed by private individuals in the one on the differences between disclosure of secrets and breach of official secrecy. Where the use of the secret or of inside information is aimed at obtaining an economic benefit for oneself or a third party, the applicable provision is Art. 442 CP.

Damage to computer data under Art. 264 CP — six months to three years in prison — punishes anyone who, without authorisation and seriously, erases, damages, alters, suppresses or renders inaccessible another's computer data, programs or electronic documents, where the result produced is serious. The boundary rests on two points: the data belonging to another, and the perpetrator's status as custodian. Where an official deletes the very file entrusted to them, the chapter on breach of custody applies. And where the document disappears in order to prevent another offence from being discovered, the horizon is acting as an accessory after the fact under Art. 451 CP — six months to three years in prison — whose limb 2 punishes concealing, altering or rendering useless the body, effects or instruments of an offence to prevent its discovery, and which requires that the person took no part in that offence as principal or accessory; obstruction of justice offences lie in the same orbit. How these provisions interact is resolved through the concurrence-of-laws rules of Art. 8 CP or, where one act is a necessary means of committing another, through Art. 77 CP. In complex cases breach of document custody appears alongside embezzlement of public funds, whose proof rests precisely on the missing documentation.

Penalty, Disqualification and Limitation

The penalty under Art. 413 CP is composite and cumulative: imprisonment, fine and special disqualification are imposed together, and the court cannot choose between them. Two practical consequences follow.

The first concerns professional continuity. Under Art. 42 CP, special disqualification produces the definitive loss of the employment or office on which it falls, even where elective, and of the honours attached to it, together with incapacity to obtain the same or analogous positions for the duration of the sentence; the judgment must specify the posts, offices and honours affected. The loss of the post is therefore not an incidental effect or a later disciplinary consequence: it is part of the penalty itself, and it operates even at the three-year minimum.

The second concerns limitation, where the calculation most often goes wrong. Art. 131.1 CP sets a ten-year period where the maximum penalty laid down by law is imprisonment or disqualification of more than five years and not exceeding ten, and a five-year period for other offences. Looking only at the prison term under Art. 413 CP — a maximum of four years — the period would be five. But Art. 131.2 CP provides that, where the statutory penalty is composite, the one demanding the longest period for limitation governs, and special disqualification under Art. 413 CP runs to six years. The offence therefore becomes time-barred after ten years.

Lines of Defence

The defence is built on verifiable material. The first line is the absence of a custodial relationship: showing that the document was not allocated to the suspect by reason of office but to another unit or to a central archive, or that the allocation had ceased before the events. The tools are documentary: staffing structures, decisions allocating duties, archive protocols and the system's profile and permissions matrix.

The second line is the absence of intent: documented IT incidents, retention and disposal instructions, backups that contradict any wish to make the document disappear, and the audit trail itself all carry weight. The third line contests the conduct element as against what is merely administrative dysfunction: concealment requires the document to be placed beyond the reach of whoever must have it, and delay in forwarding a file or the reordering of a folder do not amount to concealing it; in the partial form, the argument turns on whether what is missing affects the evidential value of the whole or is an incidental or duplicated item. The fourth line is authorisation or a superior instruction: destruction carried out under a retention schedule, a disposal decision or a service order is not unauthorised destruction, and Art. 415 CP expressly requires access to occur without due authorisation.

To this is added mistake under Art. 14 CP: an unavoidable mistake as to a fact constituting the offence excludes criminal liability and, where avoidable, the offence would be punished as negligent where applicable, which here means no liability at all since the chapter has no negligent form. The mistake may bear on the nature of the medium, on the very existence of the access restriction or on the secret character of the document; mistake as to unlawfulness is governed by Art. 14.3 CP, with the penalty reduced by one or two degrees where avoidable. Completing the picture is the individual allocation of responsibility where several people share access to the same repository, an issue common to other crimes against the public administration.

The Proceedings and the Parallel Disciplinary File

These cases rarely begin with a complaint from an injured party. They usually start with an internal report — from the unit concerned, from a systems audit, or from the discovery that documents are missing when a court request is answered — or with the intervention of the Public Prosecutor, who may open an investigation before any court proceedings exist. The investigation then turns almost entirely on digital and documentary evidence, whose integrity and chain of custody are open to challenge as in any other case: early involvement of the defence makes it possible to shape the scope of the expert report.

A disciplinary file is usually running in parallel. The rule is the precedence of criminal proceedings: the administrative procedure is normally stayed pending the outcome of the criminal case, and the administration is bound by the facts the judgment declares proven. This reflects the ne bis in idem principle, which prevents double punishment where there is identity of subject, facts and legal basis; where the basis differs, the disciplinary sanction may stand alongside the criminal one. Whatever is stated in the administrative file will end up being read in court, so both defences must be coordinated from the outset.

Finally, interim measures deserve attention: quite apart from any ordered in the criminal case, the administration may suspend the official from duty or move them to another post while the file is being processed. And where the conduct forms part of a decision whose lawfulness is also in issue, the case may be extended to administrative malfeasance under Art. 404 CP, with a different evidential focus.