
Criminal Lawyers in Child Pornography Distribution
Technical defence under Art. 189.1.b CP. Challenging intent to share and differentiating automatic seeding
Article 189.1.b CP punishes distributing, disseminating, facilitating or displaying child pornography material with imprisonment of 1 to 5 years, a penalty considerably higher than mere possession for personal use (3 months to 1 year, Article 189.5 CP). Distribution requires an act of making the material available to third parties, whether active - direct sending - or arising from the automatic operation of P2P networks, where the defence can challenge whether there was a genuine intention to share. Accessing encrypted communications as evidence requires express judicial authorisation. Our defence distinguishes voluntary sending from unconsented automatic distribution and examines the legality of the interception of communications and of identification through the IP address.
Child Pornography Distribution: Art. 189.1.b of the Criminal Code
The offence of distribution, dissemination, facilitation or exhibition of child pornography (Art. 189.1.b CP) protects the sexual indemnity of minors and the dignity inherent to their condition. The provision sanctions with 1 to 5 years' prison the production, sale, distribution, dissemination, exhibition or facilitation of such activities regarding pornographic material elaborated using minors or persons with disabilities. Distribution is the most frequently prosecuted modality: most proceedings of Art. 189 CP originate from police detection of P2P downloads and sharing through undercover operations and specific tracking software. The offence covers "making available" to third parties and also possession for those purposes, which distinguishes it from mere possession for personal use (Art. 189.5 CP), with decisive practical consequences in criminal classification.
The difference between distribution and simple possession is punitively transcendental. Possession for personal use (Art. 189.5 CP) carries 3 months to 1 year of prison or fine, without necessary actual imprisonment and with possibility of sentence suspension when there are no prior records. Distribution (Art. 189.1.b CP) multiplies the penalty up to 5 years, requires greater proof of active will to make material available to third parties, and sensibly hinders suspension. The technical frontier between both modalities is "making available": any act allowing third parties to access the material —direct sending, uploading to shared cloud, P2P sharing, streaming exhibition, forum publication, distribution in Telegram groups— integrates distribution. The nuclear procedural problem is that many P2P programs automatically share downloaded files (seeding mechanism), turning what the user perceived as simple download into technically consummated distribution.
The commissive modalities present very different degrees of gravity. Active distribution through direct sending by email, WhatsApp, Telegram or upload to forums and exchange platforms is the most seriously reproachable modality: it implies unequivocal voluntary act of selecting material, choosing recipient and executing sending. Passive distribution by P2P seeding (eMule/eDonkey, BitTorrent, uTorrent, qBittorrent) is technically sharing but subjectively questionable: many users are unaware of the automatic sharing mechanism or default configuration of "Incoming" folders. The administration of groups, forums or channels where material is shared can integrate aggravated distribution or even criminal organization (Art. 570 bis CP). Dark web operations through Tor or encrypted networks with cryptocurrency payment systems are investigated with particular intensity due to their technical sophistication, although the organisation aggravation (Art. 189.2.f CP) must be proven, not presumed. Supreme Court case-law has had to outline case by case the scope of distribution intent in scenarios of automatic seeding.
Technical defence is built on four axes. First, the unawareness of automatic seeding: when the accused used P2P programs for their common use for legal downloads (movies, software, music), being unaware of the automatic sharing mechanism of downloaded files, distribution intent is excluded; computer expert evidence can prove the user's technical profile, default software configuration, absence of manual changes to sharing settings. Second, the reclassification to simple possession (Art. 189.5 CP): the absence of will to make material available to third parties, combined with low technical profile and casual software use, allows degrading the classification from distribution (1-5 years) to possession (3 months-1 year), with decisive consequences in sentence suspension. Third, the challenge of authorship attribution: in vulnerable wifi networks, shared devices in households with multiple inhabitants, simultaneous sessions of different users, the specific attribution of downloads and sharing to a particular person may be doubtful, the in dubio pro reo principle operating. Fourth, procedural defects: defects in the digital chain of custody, absence of write blocker, discrepant hashes, irregularities in entry and search, are potential evidentiary nullities.
In current forensic practice, police operations on distribution have reached massive dimensions. The BIT-Technological Investigation Brigade of the National Police and the GDT-Telematic Crime Group of the Civil Guard use specialized software that connects to P2P networks in real time and records IP addresses sharing files with hashes catalogued as child pornography in NCMEC and Interpol's ICSE databases. International cooperations with Europol, Interpol and national agencies (FBI, BKA, Gendarmerie) have allowed simultaneous operations with hundreds of indicted persons. Organic Law 8/2021 on integral protection of childhood, the Budapest Convention on Cybercrime and Directive 2011/93/EU have hardened penalties and expanded technological investigation tools. Organic Law 1/2025 on the efficiency of the Public Justice Service is a procedural and organisational statute: it does not amend the Criminal Code or its penalties. At Alonso Sala, our criminal lawyers specialized in child pornography distribution work with forensic computer experts to analyse P2P software logs, chronologically reconstruct sharing sessions, demonstrate the accused's low technical profile and articulate defences that allow reclassification to simple possession, sentence suspension when Art. 80 CP circumstances concur, and minimization of impact on the defendant's professional trajectory and criminal record.
TECHNICAL KEYThe P2P Seeding Problem
Peer-to-peer programs (eMule, BitTorrent, uTorrent) operate under a reciprocity principle: when downloading a file, the program automatically makes it available to other users (seeding). The user seeking to download may not know their computer is simultaneously distributing that file to hundreds of people worldwide.
Shares automatically upon download. "Incoming" folder is public by default. User may have never configured this option.
Seeding is an essential part of the protocol. Stopping sharing requires manual user action. Many users are unaware of this function.
Police connect to P2P network and record IPs sharing files with illicit hashes. Your IP is documented as "distributing".
Distribution Defence Strategies
Seeding Unawareness
Proving user was unaware the program shared automatically. Expert analysis of default software configuration, absence of manual sharing settings changes, and user's technical level.
Legal Content Search
If the user searched for legal adult pornography and the program downloaded deceptively named files that turned out to be illicit, distribution intent is significantly diluted. Search terms and filenames are crucial.
Minimal Exposure Time
If file was shared only during download time (minutes or hours) and deleted immediately after, distribution was minimal and involuntary. P2P program logs and file dates (creation vs deletion) are the evidence.
Unidentified Third Party
In households with multiple inhabitants or shared devices, and especially with vulnerable wifi, attributing P2P activity to a specific person is impossible without analysing the active user session during download and sharing hours.
Why Choose Us for Distribution Defence?
Because the line between possession (3 months to 1 year) and distribution (1 to 5 years) can be in a configuration checkbox your client never touched. Our legal-technical team analyses P2P program logs, seeding dates, default configuration, and the accused's technical profile to defend reclassification to simple possession.
- Forensic analysis of P2P software used (eMule, uTorrent, qBittorrent).
- Temporal reconstruction of sharing sessions.
- Demonstration of accused's low technical profile.
- Charge reduction from distribution to possession (5 years to 1 year).
Child Pornography in Spain: Complete Legal Defence Guide
Child pornography offences in Spain are governed by Art. 189 of the Criminal Code, with penalties ranging from 3 months (simple possession) to 9 years in prison (aggravated forms, Art. 189.2), or more with violence or intimidation (Art. 189.3). Online grooming is separately criminalized under Art. 183 CP. These crimes are investigated with specialized digital forensic tools and international cooperation through Europol, Interpol, and the ICSE database. Defence requires both deep legal knowledge and technical digital forensic expertise.
Penalty Table: Art. 189 CP & Related Offences
| Offence | Article | Penalty |
|---|---|---|
| Production of child pornographic material | Art. 189.1 | 1 – 5 years |
| Distribution / dissemination | Art. 189.1.b | 1 – 5 years |
| Aggravated (victim <16, organization, notorious importance) | Art. 189.2 | 5 – 9 years |
| Facilitating minors' access to pornography | Art. 186 | 6 months – 1 year or fine |
| Simple possession (personal use) | Art. 189.5 | 3 months – 1 year or fine |
| Grooming (online contact with sexual purpose) | Art. 183 | 1 – 3 years or fine |
| Deceiving a minor into providing sexual material | Art. 183.2 | 6 months – 2 years |
Critical Defence Strategies
Chain of Custody Challenge
If the seized device was handled without write blockers, stored without seal, or analysed without documented protocols, the entire digital evidence can be invalidated. This is the most powerful defence tool available.
Absence of Intent (Dolo)
Possession requires knowledge and will. Automatic P2P downloads, browser cache files, and malware infections can all store illicit material without user knowledge. Forensic analysis proving involuntary storage is essential.
IP ≠ Person Identification
An IP address identifies a connection, not a person. Vulnerable WiFi networks (WEP, no password, WPS enabled), shared routers, and VPN usage all prevent conclusive identification of the downloader.
Reclassification: Distribution → Possession
P2P programs share files automatically (seeding). If the user was unaware of this mechanism, distribution charges can be reclassified as simple possession, reducing the maximum penalty from 5 years to 1 year.
Key Defence Criteria
Files found only in the browser cache, without being organised, renamed or deliberately stored in personal folders, may not prove the intentional possession required by Art. 189.5 CP: the prosecution must prove a voluntary act of storage.
Seizing a device during a home search does not by itself authorise access to its contents: the judicial decision must specifically justify that access, or it must be authorised afterwards (Art. 588 sexies a LECrim). Evidence obtained without that authorisation may be excluded (Art. 11.1 LOPJ).
Automatic seeding in P2P programs does not by itself prove the intent to distribute: if the accused was unaware of the sharing mechanism and has a low technical profile, the defence can argue for reclassification as possession.
The Digital Forensic Process
Seizure
Device sealed on-site with photographs and chain of custody document initiated.
Forensic Cloning
Bit-by-bit copy using write blocker. SHA-256 hash generated for original and clone comparison.
Hash Comparison
File hashes compared against ICSE (Interpol) and NCMEC databases to identify known illicit material.
Timeline Reconstruction
System logs, user sessions, and file metadata analysed to determine who, when, and how files arrived.
FAQ: Child Pornography Distribution
What's the difference between distributing and possessing?
Am I automatically distributing if I use eMule or Torrent?
Is sharing via WhatsApp the same as P2P?
Can I be investigated for forwarding a meme with minors?
Does the amount of distributed material affect the sentence?
What if I administer a group or channel where material is shared?
Can they trace who downloaded files I shared?
Do foreign servers protect me?
Does dark web distribution carry heavier penalties?
Can encrypted communications be used as evidence?
Is sentence suspension possible in distribution cases?
Need urgent criminal defence?
Contact our specialist criminal defence lawyers. We evaluate your case confidentially.
Tools for your case
We also serve
View all locations →This page is for information purposes only and does not constitute legal advice: every case requires individual assessment. How this content is produced and verified: editorial policy.
Do you need specialised legal assistance?
The judicial system is complex. We have the criminal-law specialisation and technical resources required to take on the defence.