
Criminal Lawyers in Child Pornography Distribution
Technical defense under Art. 189.1.b CP. Challenging intent to share and differentiating automatic seeding
Last updated:
Child Pornography Distribution: Art. 189.1.b of the Criminal Code
The offence of distribution, dissemination, facilitation or exhibition of child pornography (Art. 189.1.b CP) protects the sexual indemnity of minors and the dignity inherent to their condition. The provision sanctions with 1 to 5 years' prison and 6 to 12 months' fine the production, sale, distribution, dissemination, exhibition or facilitation of such activities regarding pornographic material elaborated using minors or persons with disabilities. Distribution is the most frequently prosecuted modality: most proceedings of Art. 189 CP originate from police detection of P2P downloads and sharing through undercover operations and specific tracking software. Consolidated Supreme Court case-law has established that the type requires "making available" to third parties, distinct from mere possession, with decisive practical consequences in criminal classification.
The difference between distribution and simple possession is punitively transcendental. Possession for personal use (Art. 189.5 CP) carries 3 months to 1 year of prison or fine, without necessary actual imprisonment and with possibility of sentence suspension when there are no prior records. Distribution (Art. 189.1.b CP) multiplies the penalty up to 5 years, requires greater proof of active will to make material available to third parties, and sensibly hinders suspension. The technical frontier between both modalities is "making available": any act allowing third parties to access the material —direct sending, uploading to shared cloud, P2P sharing, streaming exhibition, forum publication, distribution in Telegram groups— integrates distribution. The nuclear procedural problem is that many P2P programs automatically share downloaded files (seeding mechanism), turning what the user perceived as simple download into technically consummated distribution.
The commissive modalities present very different degrees of gravity. Active distribution through direct sending by email, WhatsApp, Telegram or upload to forums and exchange platforms is the most seriously reproachable modality: it implies unequivocal voluntary act of selecting material, choosing recipient and executing sending. Passive distribution by P2P seeding (eMule/eDonkey, BitTorrent, uTorrent, qBittorrent) is technically sharing but subjectively questionable: many users are unaware of the automatic sharing mechanism or default configuration of "Incoming" folders. The administration of groups, forums or channels where material is shared can integrate aggravated distribution or even criminal organization (Art. 570 bis CP). Dark web operations through Tor or encrypted networks with cryptocurrency payment systems are more criminally serious due to their technical sophistication and presumption of transnational organization. Supreme Court case-law has had to outline case by case the scope of distribution intent in scenarios of automatic seeding.
Technical defense is built on four axes. First, the unawareness of automatic seeding: when the accused used P2P programs for their common use for legal downloads (movies, software, music), being unaware of the automatic sharing mechanism of downloaded files, distribution intent is excluded; computer expert evidence can prove the user's technical profile, default software configuration, absence of manual changes to sharing settings. Second, the reclassification to simple possession (Art. 189.5 CP): the absence of will to make material available to third parties, combined with low technical profile and casual software use, allows degrading the classification from distribution (1-5 years) to possession (3 months-1 year), with decisive consequences in sentence suspension. Third, the challenge of authorship attribution: in vulnerable wifi networks, shared devices in households with multiple inhabitants, simultaneous sessions of different users, the specific attribution of downloads and sharing to a particular person may be doubtful, the in dubio pro reo principle operating. Fourth, procedural defects: defects in the digital chain of custody, absence of write blocker, discrepant hashes, irregularities in entry and search, are potential evidentiary nullities.
In current forensic practice, police operations on distribution have reached massive dimensions. The BIT-Technological Investigation Brigade of the National Police and the GDT-Telematic Crime Group of the Civil Guard use specialized software that connects to P2P networks in real time and records IP addresses sharing files with hashes catalogued as child pornography in NCMEC and Interpol's ICSE databases. International cooperations with Europol, Interpol and national agencies (FBI, BKA, Gendarmerie) have allowed simultaneous operations with hundreds of indicted persons. Organic Law 8/2021 on integral protection of childhood, the Budapest Convention on Cybercrime, Directive 2011/93/EU and Organic Law 1/2025 on Justice Service Efficiency have hardened penalties and expanded technological investigation tools. At Alonso Sala, our criminal lawyers specialized in child pornography distribution work with certified forensic computer experts (EnCE, GCFE, CHFI) to analyze P2P software logs, chronologically reconstruct sharing sessions, demonstrate the accused's low technical profile and articulate defenses that allow reclassification to simple possession, sentence suspension when Art. 80 CP circumstances concur, and minimization of impact on the defendant's professional trajectory and criminal record.
TECHNICAL KEYThe P2P Seeding Problem
Peer-to-peer programs (eMule, BitTorrent, uTorrent) operate under a reciprocity principle: when downloading a file, the program automatically makes it available to other users (seeding). The user seeking to download may not know their computer is simultaneously distributing that file to hundreds of people worldwide.
Shares automatically upon download. "Incoming" folder is public by default. User may have never configured this option.
Seeding is an essential part of the protocol. Stopping sharing requires manual user action. Many users are unaware of this function.
Police connect to P2P network and record IPs sharing files with illicit hashes. Your IP is documented as "distributing".
Distribution Defense Strategies
Seeding Unawareness
Proving user was unaware the program shared automatically. Expert analysis of default software configuration, absence of manual sharing settings changes, and user's technical level.
Legal Content Search
If the user searched for legal adult pornography and the program downloaded deceptively named files that turned out to be illicit, distribution intent is significantly diluted. Search terms and filenames are crucial.
Minimal Exposure Time
If file was shared only during download time (minutes or hours) and deleted immediately after, distribution was minimal and involuntary. P2P program logs and file dates (creation vs deletion) are the evidence.
Unidentified Third Party
In households with multiple inhabitants or shared devices, and especially with vulnerable wifi, attributing P2P activity to a specific person is impossible without analyzing the active user session during download and sharing hours.
Why Choose Us for Distribution Defense?
Because the line between possession (3 months) and distribution (5 years) can be in a configuration checkbox your client never touched. Our legal-technical team analyzes P2P program logs, seeding dates, default configuration, and the accused's technical profile to defend reclassification to simple possession.
- checkForensic analysis of P2P software used (eMule, uTorrent, qBittorrent).
- checkTemporal reconstruction of sharing sessions.
- checkDemonstration of accused's low technical profile.
- checkCharge reduction from distribution to possession (5 years to 1 year).
Child Pornography in Spain: Complete Legal Defense Guide
Child pornography offenses in Spain are governed by Art. 189 of the Criminal Code, with penalties ranging from 3 months (simple possession) to 9 years in prison (aggravated production/distribution). Online grooming is separately criminalized under Art. 183 CP. These crimes are investigated with specialized digital forensic tools and international cooperation through Europol, Interpol, and the ICSE database. Defense requires both deep legal knowledge and technical digital forensic expertise.
Penalty Table: Art. 189 CP & Related Offenses
| Offense | Article | Penalty |
|---|---|---|
| Production of child pornographic material | Art. 189.1.a | 5 – 9 years |
| Distribution / dissemination | Art. 189.1.b | 1 – 5 years |
| Aggravated (victim <16, organization, profit) | Art. 189.2 | 5 – 9 years |
| Facilitating minors' access to pornography | Art. 189.4 | 6 months – 1 year |
| Simple possession (personal use) | Art. 189.5 | 3 months – 1 year |
| Grooming (online contact with sexual purpose) | Art. 183 | 1 – 3 years |
| Grooming + physical meeting | Art. 183.2 | 1 – 3 years (aggravated) |
Critical Defense Strategies
Chain of Custody Challenge
If the seized device was handled without write blockers, stored without seal, or analyzed without documented protocols, the entire digital evidence can be invalidated. This is the most powerful defense tool available.
Absence of Intent (Dolo)
Possession requires knowledge and will. Automatic P2P downloads, browser cache files, and malware infections can all store illicit material without user knowledge. Forensic analysis proving involuntary storage is essential.
IP ≠ Person Identification
An IP address identifies a connection, not a person. Vulnerable WiFi networks (WEP, no password, WPS enabled), shared routers, and VPN usage all prevent conclusive identification of the downloader.
Reclassification: Distribution → Possession
P2P programs share files automatically (seeding). If the user was unaware of this mechanism, distribution charges can be reclassified as simple possession, reducing the penalty from 5 years to 1 year.
Key Supreme Court Rulings
The Supreme Court established that files found exclusively in browser cache, without organization, renaming, or deliberate storage in personal folders, do not constitute the intentional possession required by Art. 189.5 CP. The prosecution must prove voluntary storage act.
The TS ruled that examining digital device contents requires a specific judicial order separate from the home search warrant (Art. 588 sexies a LECrim). Evidence obtained from computers found during a home search without specific device authorization is void.
The Court analyzed whether automatic seeding in P2P programs constitutes distribution. It held that if the accused can demonstrate unawareness of the sharing mechanism and low technical profile, distribution intent may not be proven, allowing reclassification to possession.
The Digital Forensic Process
Seizure
Device sealed on-site with photographs and chain of custody document initiated.
Forensic Cloning
Bit-by-bit copy using write blocker. SHA-256 hash generated for original and clone comparison.
Hash Comparison
File hashes compared against ICSE (Interpol) and NCMEC databases to identify known illicit material.
Timeline Reconstruction
System logs, user sessions, and file metadata analyzed to determine who, when, and how files arrived.
FAQ: Child Pornography Distribution
What's the difference between distributing and possessing?expand_more
Am I automatically distributing if I use eMule or Torrent?expand_more
Is sharing via WhatsApp the same as P2P?expand_more
Can I be investigated for forwarding a meme with minors?expand_more
Does the amount of distributed material affect the sentence?expand_more
What if I administer a group or channel where material is shared?expand_more
Can they trace who downloaded files I shared?expand_more
Do foreign servers protect me?expand_more
Does dark web distribution carry heavier penalties?expand_more
Can encrypted communications be used as evidence?expand_more
Is sentence suspension possible in distribution cases?expand_more
Do you need specialised legal assistance?
The judicial system is complex. We have the criminal-law specialisation and technical resources required to take on the defence.