
Illegal Recordings and Hidden Cameras Lawyers (Art. 197.1 CP)
Criminal defence against the non-consensual capture or recording of another person's private images or sound (hidden cameras in homes, changing rooms, bathrooms or bedrooms), punishable under art. 197.1 CP with 1 to 4 years' imprisonment and a fine.
Article 197.1 of the Spanish Criminal Code (CP) punishes with imprisonment of 1 to 4 years and a fine of 12 to 24 months anyone who, in order to discover secrets or violate another person's privacy, uses technical devices such as hidden cameras or recorders to capture images or sounds from the intimate core of another person's life (home, changing rooms, bathrooms, bedrooms) without their consent; the penalty rises to imprisonment of 2 to 5 years when what was captured is disseminated, disclosed, or transferred to third parties (Art. 197.3 CP). Not every recording is criminal: recording a conversation in which one is oneself a participant is, generally speaking, not an offence, according to the doctrine of the Constitutional Court and the Supreme Court, because there is no appropriation of another person's secret; only intercepting communications between third parties or covertly capturing another person's intimate image falls squarely within the offence. The defence is built on the specific impact on privacy and on the lawfulness of the evidence obtained. At Alonso Sala we assist both persons under investigation for installing hidden cameras and victims of non-consensual recordings.
Article 197.1 of the Spanish Criminal Code punishes anyone who, in order to discover the secrets or breach the privacy of another, without their consent, seizes their papers, letters, e-mail messages or any other personal documents or effects, intercepts their telecommunications or uses technical devices for listening to, transmitting, recording or reproducing sound or images, or any other communication signal. The penalty is imprisonment of one to four years and a fine of twelve to twenty-four months. This is the reference offence for cases of hidden cameras and clandestine recordings that invade a person's private sphere.
What conduct art. 197.1 CP punishes
The form of capture relevant here is the installation or use of technical devices (cameras, microphones, hidden recorders, spy devices) to obtain images or sound of another person's privacy without consent. The most frequent scenarios are hidden cameras inside homes, in changing rooms, bathrooms, fitting rooms or bedrooms, as well as recorders aimed at capturing other people's private conversations. The protected legal interest is personal privacy recognised in art. 18 of the Constitution, so the offence is committed by the mere act of capture, without the image or sound needing to be disseminated or made known to third parties.
Not every recording is criminal. Case law requires the conduct to affect the core of privacy and to be carried out in a surreptitious or clandestine manner. Recording in a public or semi-public space, where there is no reasonable expectation of privacy, falls in principle outside the offence. The boundary, however, is case-specific: what matters is the location, the private nature of what was captured and the absence of the affected person's consent.
The key distinction: recording your own conversation is not punishable
One of the issues that causes the most confusion is the recording of a conversation in which one personally takes part. Under the doctrine of the Constitutional Court and the Supreme Court, anyone who records their own conversation does not commit the offence under art. 197.1 CP, because they do not seize another's secret nor intercept a third party's communication: they merely document what is communicated to them. Such a recording is, as a general rule, not punishable and may even be used as evidence. It is a different matter to intercept or record conversations between third parties in which the author does not take part, or to covertly capture the intimate image of another person: that does fall squarely within the offence.
This distinction is decisive in practice. In many matters —family, workplace or relationship conflicts— a person records their own conversation to prove threats, coercion or abuse, and that conduct is not punishable. The defence or the prosecution must precisely analyse who took part in the communication, what was captured and in what space.
Penalties and aggravating factors
The basic offence under art. 197.1 CP carries 1 to 4 years' imprisonment and a fine of 12 to 24 months. Where the captured data or images are disseminated, revealed or transferred to third parties, art. 197.3 CP imposes imprisonment of 2 to 5 years; and the third party who, aware of its unlawful origin and without having taken part in its discovery, disseminates it faces 1 to 3 years' imprisonment and a fine of 12 to 24 months. Additional aggravating factors apply where the facts affect sensitive personal data (health, ideology, sexual orientation), where the victim is a minor or a person with a disability in need of special protection, or where the facts are carried out for profit. In those cases under art. 197.4 CP the penalty is imposed in its upper half.
This offence should be distinguished from the non-consensual dissemination of intimate images obtained with consent (so-called sexting or revenge porn under art. 197.7 CP), from deepfakes and AI image manipulation, and from cases of harassment or stalking, which respond to their own criminal provisions. The privacy offences page offers an overview of these figures.
How we approach the defence
The defence against a charge under art. 197.1 CP is built on two pillars. The first is the specific intrusion into privacy: not every capture invades the protected core, and the non-punishable nature of recording one's own conversation, the absence of an expectation of privacy or the consent of the affected person may exclude the offence. The second is the lawfulness and validity of the evidence: how the recordings were obtained, their chain of custody and any breach of fundamental rights determine whether they can be considered at trial. At the firm we analyse each element of the offence, the expert evidence on the devices and the context, and design the most appropriate strategy, whether you are under investigation or you are a victim wishing to act as a private prosecutor. You can consult us on 91 078 65 74 or at our office at Velázquez 27, Madrid.
Penalties & Consequences
| Type / Scenario | Criminal Penalty |
|---|---|
| Basic offence | 1 to 4 years' imprisonment and a fine of 12 to 24 months for capturing or recording another person's private images or sound without consent (art. 197.1 CP). |
| Dissemination of what was captured | Disseminating, revealing or transferring it to third parties raises the penalty to 2 to 5 years' imprisonment (art. 197.3 CP); a third party who disseminates it aware of its unlawful origin faces 1 to 3 years' imprisonment and a fine of 12 to 24 months. |
| Aggravating factors | Penalty in its upper half where it affects sensitive data, minors or persons with a disability in need of special protection, or where it is carried out for profit (art. 197.4 CP). |
* Penalties shown are indicative. The actual penalty depends on case circumstances, applicable mitigating and aggravating factors.
Our Defense Strategy
Analysis of the real intrusion into privacy
We examine whether the capture reaches the core protected by art. 18 of the Constitution (home, changing room, bathroom, bedroom) or occurred in a space without a reasonable expectation of privacy, which may exclude the offence.
Scrutiny of the lawfulness of the evidence
We study how the recordings were obtained, the chain of custody and any breach of fundamental rights, to argue the nullity or inadmissibility of the material at trial.
Own recording vs. capturing another's privacy
We establish who took part in the communication and what was captured, to invoke the non-punishable nature of recording one's own conversation as opposed to intercepting third parties' communications.
Privacy Crimes in Spain: Discovery & Disclosure of Secrets — Defence Guide
Privacy crimes — discovery and disclosure of secrets (Art. 197 CP), illegal access to computer systems (Art. 197 bis), and non-consensual image sharing (Art. 197.7) — are among the fastest-growing offences in Spain. The digital environment has made private communications, intimate images and personal data especially vulnerable. These offences carry prison sentences of up to 5 years and require specialised technical defence combining legal expertise with digital forensics.
Penalty Table: Privacy Crimes
| Offence | Article | Description | Penalty |
|---|---|---|---|
| Discovery of secrets (basic) | Art. 197.1 | Seizing letters, emails, or intercepting telecommunications | 1 – 4 years prison |
| Disclosure to third parties | Art. 197.3 | Revealing or transferring discovered secrets | 2 – 5 years prison |
| Sensitive data (health, sexuality, ideology) | Art. 197.5 | Discovery/disclosure involving specially protected data | 3 – 5 years prison |
| Illegal access to computer systems | Art. 197 bis | Unauthorised access breaching security measures | 6 months – 2 years |
| Non-consensual image sharing (sexting) | Art. 197.7 | Sharing intimate images obtained with consent | 3 months – 1 year |
| Professional perpetrator | Art. 197.4 | Crime committed by person in charge of data files | Upper half + disqualification |
Key Defence Strategies
Consent Defence
If the victim gave express consent to access their communications or devices, the crime is excluded. The defence must prove that consent was freely given, specific and not obtained through deception.
Fruit of the Poisonous Tree
If the prosecution's evidence was obtained through illegal means (hacked WhatsApp, unauthorised wiretap), it is inadmissible under Art. 11.1 LOPJ. Challenging the chain of custody is critical.
Lack of Criminal Intent (Dolo)
If the access was accidental or by mistake (opening someone else's email by confusion, finding an unlocked phone), there is no criminal intent. The prosecution must prove the accused acted knowingly.
Whistleblowing Protection
EU Whistleblowing Directive (2019/1937) protects employees who report illegal activity through proper channels. Revealing secrets to expose crime may be justified, though procedure matters.
IP Attribution Challenge
An IP address alone may not identify the perpetrator. Shared connections (Wi-Fi, VPN, corporate networks) create reasonable doubt about who actually accessed the data.
Statute of Limitations
Basic privacy crimes prescribe in 5 years. Digital evidence is volatile — logs, IPs and server records may be deleted. Early action by both prosecution and defence is essential.
Key Case Law
The Supreme Court confirmed that accessing a partner's unlocked phone constitutes the crime of Art. 197.1 CP. The absence of a password does not imply consent. Privacy is presumed regardless of security measures.
Following the European Court of Human Rights case law on employer monitoring of employee communications, the Court ruled that such monitoring requires prior, clear policy notification. Without it, evidence is inadmissible and the employer may face criminal liability.
Clarified that Art. 197.7 requires images obtained WITH victim's consent (within a relationship) and shared WITHOUT consent. Images obtained covertly constitute a different offence (Art. 197.1).
Why Choose Us?
Need a criminal defense lawyer for this type of offense? Here's how we work:
Need urgent criminal defence?
Contact our specialist criminal defence lawyers. We evaluate your case confidentially.
Tools for your case
We also serve
View all locations →This page is for information purposes only and does not constitute legal advice: every case requires individual assessment. How this content is produced and verified: editorial policy.
Do you need specialised legal assistance?
The judicial system is complex. We have the criminal-law specialisation and technical resources required to take on the defence.