Last updated:
Specialist Defense in Secrets Disclosure Crimes
The offence of discovery and revelation of secrets, regulated in Arts. 197 to 201 of the Spanish Criminal Code, protects the fundamental right to personal and family privacy and the secret of communications (Arts. 18.1 and 18.3 SC). Consolidated Supreme Court case-law has precisified the contours of the type: it requires unlawful appropriation of papers, letters, email messages or any other personal documents or items; interception of communications by technical artifice; breach of computer keys or security measures; or the use of listening, transmission, recording or reproduction devices of sound or image without consent. As criminal lawyers specialising in offences against privacy, we tackle each file with specialised forensic computer expertise.
The typical modalities are varied and constantly sophisticated. Access to other persons' private communications (WhatsApp, email, social media) through improper use of known passwords or breach of keys. The installation of stalkerware (spyware) on third-party devices to monitor calls, messages, location, microphone and camera, frequently in gender-violence or couple-conflict contexts. The secondary sexting or non-consensual sharing of intimate images received with consent limited to the recipient (Art. 197.7 CP). The clandestine recording of conversations between third parties (Art. 197.1 CP), distinct from recording one's own conversations which case-law has considered lawful. The undue work access to employees' professional e-mail without acceptable-use policies. And the revelation of trade secrets (Arts. 278-280 CP) in cases of unfair competition and employee betrayal.
The penalties are significant. The basic type under Art. 197.1 CP (appropriation of papers, messages or interception of communications) carries prison from 1 to 4 years and fine of 12 to 24 months. If the discovered data are disclosed or transferred to third parties (Art. 197.3 CP), penalties rise to prison from 2 to 5 years. Sextortion and non-consensual sharing of intimate images (Art. 197.7 CP) sanctions with prison from 3 months to 1 year or fine, aggravable when there is affective relationship, particularly vulnerable victim or profit motive. Revelation of trade secrets carries prison from 2 to 4 years (Arts. 278-280 CP), expandable to 3-5 years when own or third-party profit motive is obtained. To custodial penalties always corresponds civil liability for moral and patrimonial damages caused.
The technical defence articulates several complementary lines. First, the prior consent: the partner or ex-partner, the employee, the family member may have consented to access at some point; expertise documents the scope and revocation of consent. Second, the reasonable expectation of privacy in work contexts (STC 39/2016, CJEU López Ribalda): if there was an acceptable-use policy, legitimate control and prior notification to the employee, the employer's access to professional e-mail is lawful. Third, the recording of own conversation (Art. 18.3 SC interpreted by STS 298/2013, 414/2014): legally, whoever participates in a conversation may record it without it constituting an offence, even if the other party ignores the recording. Fourth, the mistake of fact or prohibition in accidental access or ignorance of ownership cases. Fifth, the challenge to the digital chain of custody of the material presented by the prosecution, frequently defective in police investigations.
In current forensic practice we observe exponential growth in proceedings for discovery and revelation of secrets, especially linked to couple conflicts, gender violence with digital-stalking component, labour conflicts with unlawful employee monitoring, executive betrayal copying databases before exit, sextortion and revenge porn after break-ups, and digital grooming of minors. Organic Law 1/2022 on the integral guarantee of sexual freedom, Act 1/2019 on Trade Secrets, Organic Law 1/2025 on Justice Service Efficiency, the EU GDPR 2016/679 and recent case-law on electronic evidence and digital chain of custody have transformed the regulatory framework. At Alonso Sala, we tackle each file with certified forensic computer experts, manage urgent content-removal requests and articulate the defence or prosecution with the urgency and discretion the matter demands.
Secrets Disclosure Defense Services
Our secrets disclosure crime specialists design advanced defense strategies, thoroughly analyzing the expectation of privacy, consent, and developing digital forensics when necessary.
- Partner Espionage: Installing spyware (stalkerware) on a partner's mobile is a serious crime of discovery of secrets, often concurrent with gender violence.
- Business Control: Can the boss read the employee's emails? Only if there is a clear and notified device usage policy that eliminates the "expectation of privacy". Otherwise, it is a crime.
Why Alonso Sala for Discovery of Secrets?
Digital espionage, sexting, and trade secrets. Mastery of privacy expectation vs. corporate policies
- shield'Privacy expectation' strategy in labor context (company policies).
- shieldSecondary sexting defense: metadata analysis to prove non-dissemination.
- shieldForensic stalkerware analysis to identify installer.
- shieldTrade secrets litigation: economic damage valuation vs. criminal typicality.
Privacy Crimes in Spain: Discovery & Disclosure of Secrets — Defence Guide
Privacy crimes — discovery and disclosure of secrets (Art. 197 CP), illegal access to computer systems (Art. 197 bis), and non-consensual image sharing (Art. 197.7) — are among the fastest-growing offences in Spain. The digital environment has made private communications, intimate images and personal data especially vulnerable. These offences carry prison sentences of up to 5 years and require specialised technical defence combining legal expertise with digital forensics.
Penalty Table: Privacy Crimes
| Offence | Article | Description | Penalty |
|---|---|---|---|
| Discovery of secrets (basic) | Art. 197.1 | Seizing letters, emails, or intercepting telecommunications | 1 – 4 years prison |
| Disclosure to third parties | Art. 197.3 | Revealing or transferring discovered secrets | 2 – 5 years prison |
| Sensitive data (health, sexuality, ideology) | Art. 197.5 | Discovery/disclosure involving specially protected data | 3 – 5 years prison |
| Illegal access to computer systems | Art. 197 bis | Unauthorised access breaching security measures | 6 months – 2 years |
| Non-consensual image sharing (sexting) | Art. 197.7 | Sharing intimate images obtained with consent | 3 months – 1 year |
| Professional perpetrator | Art. 197.4 | Crime committed by person in charge of data files | Upper half + disqualification |
Key Defence Strategies
Consent Defence
If the victim gave express consent to access their communications or devices, the crime is excluded. The defence must prove that consent was freely given, specific and not obtained through deception.
Fruit of the Poisonous Tree
If the prosecution's evidence was obtained through illegal means (hacked WhatsApp, unauthorised wiretap), it is inadmissible under Art. 11.1 LOPJ. Challenging the chain of custody is critical.
Lack of Criminal Intent (Dolo)
If the access was accidental or by mistake (opening someone else's email by confusion, finding an unlocked phone), there is no criminal intent. The prosecution must prove the accused acted knowingly.
Whistleblowing Protection
EU Whistleblowing Directive (2019/1937) protects employees who report illegal activity through proper channels. Revealing secrets to expose crime may be justified, though procedure matters.
IP Attribution Challenge
An IP address alone may not identify the perpetrator. Shared connections (Wi-Fi, VPN, corporate networks) create reasonable doubt about who actually accessed the data.
Statute of Limitations
Basic privacy crimes prescribe in 5 years. Digital evidence is volatile — logs, IPs and server records may be deleted. Early action by both prosecution and defence is essential.
Key Case Law
The Supreme Court confirmed that accessing a partner's unlocked phone constitutes the crime of Art. 197.1 CP. The absence of a password does not imply consent. Privacy is presumed regardless of security measures.
Following ECHR Barbulescu v Romania, the Court ruled that employer monitoring of employee communications requires prior, clear policy notification. Without it, evidence is inadmissible and the employer may face criminal liability.
Clarified that Art. 197.7 requires images obtained WITH victim's consent (within a relationship) and shared WITHOUT consent. Images obtained covertly constitute a different offence (Art. 197.1).
FAQs
Is it a crime to read my partner's WhatsApp if I know their password?expand_more
As a boss, can I read my employees' emails?expand_more
If my partner sent me an intimate photo, can I forward it to a friend?expand_more
What is 'stalkerware'?expand_more
Is recording a conversation I am part of a crime?expand_more
What is the penalty for revealing a trade secret?expand_more
Is it a crime to access an employee's company email?expand_more
Is spyware on someone else's devices a crime?expand_more
Can parents spy on their minor children's phones?expand_more
Is it a crime to look up information about someone in public databases?expand_more
Looking for a Secrets Disclosure Defense Lawyer in Spain?
As a national law firm, we offer specialized criminal defense in courts across Madrid and the rest of Spain. We handle each Secrets Disclosure Defense case with the urgency and technical rigor it requires from day one.
Do you need specialised legal assistance?
The judicial system is complex. We have the criminal-law specialisation and technical resources required to take on the defence.