
Criminal Lawyers in Child Pornography
Advanced technical defense under Art. 189 of the Criminal Code. Protecting your fundamental rights against digital evidence
Last updated:
Art. 189 CP: Legal Framework for Child Pornography
The offence of child pornography (Art. 189 CP) protects the legal interest of minors' sexual indemnity and, mediately, their dignity and integral development guaranteed in the UN Convention on the Rights of the Child (1989) and the Lanzarote Convention (Council of Europe 2007). The reform under LO 1/2015 radically expanded the typical scope, incorporating not only material using real minors but also realistic representations generated by computer, deepfakes and images produced by artificial intelligence staging minors or persons appearing to be in sexually explicit attitudes. Consolidated Supreme Court case-law and CJEU (case C-348/19) clarifies the contours of the type, distinguishing commissive modalities and requiring specific intent for all of them.
The Criminal Code structures three autonomous modalities with radically differentiated penalties. The production of pornographic material with real minors (Art. 189.1.a CP) is the most severely punished conduct, with 5 to 9 years' prison; when the aggravating factors of Art. 189.2 CP concur (minor under 16, prostitution situation, criminal organization, special degradation), the penalty can reach 9 years in upper half and require actual incarceration. Distribution, facilitation, dissemination or making available of child pornographic material (Art. 189.1.b CP) carries 1 to 5 years' prison; includes activities in P2P networks, forums, Telegram channels, shared cloud storage. Mere possession for personal use (Art. 189.5 CP) is punished with 3 months to 1 year of prison, or 6 months to 2 years' fine; although the penalty is the lowest, collateral consequences are devastating: registration in the Central Sex Offenders Registry for decades, disqualification to work with minors, device seizure.
The detection and prosecution mechanisms are highly technological. PhotoDNA, developed by Microsoft and adopted by Google, Facebook, Twitter and other providers, automatically scans file uploads and, through robust hashing, identifies known material catalogued by the NCMEC (National Center for Missing & Exploited Children). Alerts are transmitted to NCMEC, which redirects them to national authorities (in Spain, the BIT-Technological Investigation Brigade of the National Police and the GDT-Telematic Crime Group of the Civil Guard). Investigations develop through IP address tracking, requesting information from service providers (ISPs), international letters rogatory coordinated by Europol and Interpol, and undercover operations on forums and P2P networks. The digital chain of custody is a critical element: any defect in forensic cloning, use of write blockers, hash MD5/SHA256 verification or device sealing may determine evidentiary nullity.
Technical defense is built on four axes. First, the absence of intent in possession: the possession offence requires knowledge and will to possess; when files come from automatic browser downloads, cache-stored files, unsolicited receipts in Telegram/WhatsApp groups or pop-ups, computer expert evidence can prove the absence of acquisition will. Second, the incorrect identification of perpetrator: an IP address identifies a connection point —typically a router— and not a specific physical person; when the wifi network was vulnerable, there were several users in the dwelling, password was shared with neighbors or the router presented security failures, the in dubio pro reo principle operates. Third, the vulnerabilities of digital chain of custody: device manipulation without write blockers, absence of verification hash, sealing failures, breakage of documentary traceability, determine evidentiary nullity. Fourth, the challenge of police operation: entry and search must have motivated judicial authorization, legal assistance to the detained must be respected from the first moment, and line-ups and witness statements must adjust to procedural guarantees.
In current forensic practice, police operations on child pornography have reached massive dimensions: coordinated international operations with hundreds of simultaneous investigated, server interventions abroad through international judicial cooperation (EU Regulation 2018/1727 on Eurojust, MLA), application of the Budapest Convention on Cybercrime. Organic Law 8/2021 on integral protection of childhood and adolescence against violence has reinforced the protective framework and hardened penalties. Organic Law 1/2025 on Justice Service Efficiency and constitutional case-law on electronic evidence and Supreme Court doctrine on intent and typical attribution configure a demanding procedural scenario. At Alonso Sala, our criminal lawyers specialized in child pornography work with a multidisciplinary team of computer forensic experts, international judicial cooperation specialists and cybersecurity experts to audit the digital chain of custody, challenge evidence obtained in jurisdictions with lower standards, articulate defenses based on absence of intent, and build procedural strategies aimed at acquittal, sentence suspension when Art. 80 CP circumstances concur, and minimization of devastating accessory consequences (Central Sex Offenders Registry, professional disqualification).
Specialized Defense Services
Possession of Material (Art. 189.5)
Technical defense in possession for personal use cases. Cache files, automatic P2P downloads, and absence of intent as defense pillars.
Distribution & Sharing (Art. 189.1.b)
Defense against distribution, facilitation, or making available charges. Differentiating automatic P2P sharing from intentional distribution.
Grooming — Art. 183 CP
Sexual solicitation of minors through technology. Defense against undercover agents, age mistake, and entrapment.
Digital Forensics Defense
Specialist counter-forensics: chain of custody, metadata analysis, HASH, malware, and network vulnerabilities as defense foundation.
Why Alonso Sala for Child Pornography Defense?
Because we know a positive HASH in Interpol's ICSE database doesn't equal a conviction. Because we understand the digital chain of custody is as vulnerable as an unencrypted ZIP file. And because we defend with equal technical intensity both the rights of the accused and the integrity of the evidence.
- checkSpecialist computer counter-forensics with in-house laboratory.
- checkReal experience in international police operations (Europol/Interpol).
- checkStrict chain of custody control from seizure.
- checkConfidentiality and digital reputation management.
hubOther Sexual Offenses
Sexual Assault
Defense against sexual assault charges.
Sexual Harassment
Defense in workplace sexual harassment.
Trafficking
Defense in trafficking macro-cases.
Exhibitionism
Defense against exhibitionism charges.
Sextortion
Non-consensual intimate image sharing.
Chemical Submission
Defense in chemical submission cases.
Child Pornography in Spain: Complete Legal Defense Guide
Child pornography offenses in Spain are governed by Art. 189 of the Criminal Code, with penalties ranging from 3 months (simple possession) to 9 years in prison (aggravated production/distribution). Online grooming is separately criminalized under Art. 183 CP. These crimes are investigated with specialized digital forensic tools and international cooperation through Europol, Interpol, and the ICSE database. Defense requires both deep legal knowledge and technical digital forensic expertise.
Penalty Table: Art. 189 CP & Related Offenses
| Offense | Article | Penalty |
|---|---|---|
| Production of child pornographic material | Art. 189.1.a | 5 – 9 years |
| Distribution / dissemination | Art. 189.1.b | 1 – 5 years |
| Aggravated (victim <16, organization, profit) | Art. 189.2 | 5 – 9 years |
| Facilitating minors' access to pornography | Art. 189.4 | 6 months – 1 year |
| Simple possession (personal use) | Art. 189.5 | 3 months – 1 year |
| Grooming (online contact with sexual purpose) | Art. 183 | 1 – 3 years |
| Grooming + physical meeting | Art. 183.2 | 1 – 3 years (aggravated) |
Critical Defense Strategies
Chain of Custody Challenge
If the seized device was handled without write blockers, stored without seal, or analyzed without documented protocols, the entire digital evidence can be invalidated. This is the most powerful defense tool available.
Absence of Intent (Dolo)
Possession requires knowledge and will. Automatic P2P downloads, browser cache files, and malware infections can all store illicit material without user knowledge. Forensic analysis proving involuntary storage is essential.
IP ≠ Person Identification
An IP address identifies a connection, not a person. Vulnerable WiFi networks (WEP, no password, WPS enabled), shared routers, and VPN usage all prevent conclusive identification of the downloader.
Reclassification: Distribution → Possession
P2P programs share files automatically (seeding). If the user was unaware of this mechanism, distribution charges can be reclassified as simple possession, reducing the penalty from 5 years to 1 year.
Key Supreme Court Rulings
The Supreme Court established that files found exclusively in browser cache, without organization, renaming, or deliberate storage in personal folders, do not constitute the intentional possession required by Art. 189.5 CP. The prosecution must prove voluntary storage act.
The TS ruled that examining digital device contents requires a specific judicial order separate from the home search warrant (Art. 588 sexies a LECrim). Evidence obtained from computers found during a home search without specific device authorization is void.
The Court analyzed whether automatic seeding in P2P programs constitutes distribution. It held that if the accused can demonstrate unawareness of the sharing mechanism and low technical profile, distribution intent may not be proven, allowing reclassification to possession.
The Digital Forensic Process
Seizure
Device sealed on-site with photographs and chain of custody document initiated.
Forensic Cloning
Bit-by-bit copy using write blocker. SHA-256 hash generated for original and clone comparison.
Hash Comparison
File hashes compared against ICSE (Interpol) and NCMEC databases to identify known illicit material.
Timeline Reconstruction
System logs, user sessions, and file metadata analyzed to determine who, when, and how files arrived.
Child Pornography FAQ
What penalties does child pornography carry in Spain?expand_more
Is mere possession a crime even without sharing?expand_more
What if files were in my browser cache?expand_more
Does my IP address prove I did it?expand_more
Can police search my home?expand_more
What is grooming?expand_more
Are AI-generated images a crime?expand_more
How is online child pornography investigated?expand_more
Do I need a specialized criminal lawyer?expand_more
How does international cooperation affect these cases?expand_more
What are the consequences of Sex Offender Registry registration?expand_more
Can cooperating with the investigation reduce the sentence?expand_more
Do you need specialised legal assistance?
The judicial system is complex. We have the criminal-law specialisation and technical resources required to take on the defence.