Skip to content
A
Alonso Sala
CRIMINAL LAWYERS
ES

Criminal Lawyers in Child Pornography Distribution

Technical defense under Art. 189.1.b CP. Challenging intent to share and differentiating automatic seeding

Last updated:

Child Pornography Distribution: Art. 189.1.b of the Criminal Code

The offence of distribution, dissemination, facilitation or exhibition of child pornography (Art. 189.1.b CP) protects the sexual indemnity of minors and the dignity inherent to their condition. The provision sanctions with 1 to 5 years' prison and 6 to 12 months' fine the production, sale, distribution, dissemination, exhibition or facilitation of such activities regarding pornographic material elaborated using minors or persons with disabilities. Distribution is the most frequently prosecuted modality: most proceedings of Art. 189 CP originate from police detection of P2P downloads and sharing through undercover operations and specific tracking software. Consolidated Supreme Court case-law has established that the type requires "making available" to third parties, distinct from mere possession, with decisive practical consequences in criminal classification.

The difference between distribution and simple possession is punitively transcendental. Possession for personal use (Art. 189.5 CP) carries 3 months to 1 year of prison or fine, without necessary actual imprisonment and with possibility of sentence suspension when there are no prior records. Distribution (Art. 189.1.b CP) multiplies the penalty up to 5 years, requires greater proof of active will to make material available to third parties, and sensibly hinders suspension. The technical frontier between both modalities is "making available": any act allowing third parties to access the material —direct sending, uploading to shared cloud, P2P sharing, streaming exhibition, forum publication, distribution in Telegram groups— integrates distribution. The nuclear procedural problem is that many P2P programs automatically share downloaded files (seeding mechanism), turning what the user perceived as simple download into technically consummated distribution.

The commissive modalities present very different degrees of gravity. Active distribution through direct sending by email, WhatsApp, Telegram or upload to forums and exchange platforms is the most seriously reproachable modality: it implies unequivocal voluntary act of selecting material, choosing recipient and executing sending. Passive distribution by P2P seeding (eMule/eDonkey, BitTorrent, uTorrent, qBittorrent) is technically sharing but subjectively questionable: many users are unaware of the automatic sharing mechanism or default configuration of "Incoming" folders. The administration of groups, forums or channels where material is shared can integrate aggravated distribution or even criminal organization (Art. 570 bis CP). Dark web operations through Tor or encrypted networks with cryptocurrency payment systems are more criminally serious due to their technical sophistication and presumption of transnational organization. Supreme Court case-law has had to outline case by case the scope of distribution intent in scenarios of automatic seeding.

Technical defense is built on four axes. First, the unawareness of automatic seeding: when the accused used P2P programs for their common use for legal downloads (movies, software, music), being unaware of the automatic sharing mechanism of downloaded files, distribution intent is excluded; computer expert evidence can prove the user's technical profile, default software configuration, absence of manual changes to sharing settings. Second, the reclassification to simple possession (Art. 189.5 CP): the absence of will to make material available to third parties, combined with low technical profile and casual software use, allows degrading the classification from distribution (1-5 years) to possession (3 months-1 year), with decisive consequences in sentence suspension. Third, the challenge of authorship attribution: in vulnerable wifi networks, shared devices in households with multiple inhabitants, simultaneous sessions of different users, the specific attribution of downloads and sharing to a particular person may be doubtful, the in dubio pro reo principle operating. Fourth, procedural defects: defects in the digital chain of custody, absence of write blocker, discrepant hashes, irregularities in entry and search, are potential evidentiary nullities.

In current forensic practice, police operations on distribution have reached massive dimensions. The BIT-Technological Investigation Brigade of the National Police and the GDT-Telematic Crime Group of the Civil Guard use specialized software that connects to P2P networks in real time and records IP addresses sharing files with hashes catalogued as child pornography in NCMEC and Interpol's ICSE databases. International cooperations with Europol, Interpol and national agencies (FBI, BKA, Gendarmerie) have allowed simultaneous operations with hundreds of indicted persons. Organic Law 8/2021 on integral protection of childhood, the Budapest Convention on Cybercrime, Directive 2011/93/EU and Organic Law 1/2025 on Justice Service Efficiency have hardened penalties and expanded technological investigation tools. At Alonso Sala, our criminal lawyers specialized in child pornography distribution work with certified forensic computer experts (EnCE, GCFE, CHFI) to analyze P2P software logs, chronologically reconstruct sharing sessions, demonstrate the accused's low technical profile and articulate defenses that allow reclassification to simple possession, sentence suspension when Art. 80 CP circumstances concur, and minimization of impact on the defendant's professional trajectory and criminal record.

TECHNICAL KEYThe P2P Seeding Problem

Peer-to-peer programs (eMule, BitTorrent, uTorrent) operate under a reciprocity principle: when downloading a file, the program automatically makes it available to other users (seeding). The user seeking to download may not know their computer is simultaneously distributing that file to hundreds of people worldwide.

eMule / eDonkey

Shares automatically upon download. "Incoming" folder is public by default. User may have never configured this option.

BitTorrent

Seeding is an essential part of the protocol. Stopping sharing requires manual user action. Many users are unaware of this function.

Police Evidence

Police connect to P2P network and record IPs sharing files with illicit hashes. Your IP is documented as "distributing".

Distribution Defense Strategies

settings_suggest

Seeding Unawareness

Proving user was unaware the program shared automatically. Expert analysis of default software configuration, absence of manual sharing settings changes, and user's technical level.

search

Legal Content Search

If the user searched for legal adult pornography and the program downloaded deceptively named files that turned out to be illicit, distribution intent is significantly diluted. Search terms and filenames are crucial.

timer

Minimal Exposure Time

If file was shared only during download time (minutes or hours) and deleted immediately after, distribution was minimal and involuntary. P2P program logs and file dates (creation vs deletion) are the evidence.

person_off

Unidentified Third Party

In households with multiple inhabitants or shared devices, and especially with vulnerable wifi, attributing P2P activity to a specific person is impossible without analyzing the active user session during download and sharing hours.

security

Why Choose Us for Distribution Defense?

Because the line between possession (3 months) and distribution (5 years) can be in a configuration checkbox your client never touched. Our legal-technical team analyzes P2P program logs, seeding dates, default configuration, and the accused's technical profile to defend reclassification to simple possession.

  • checkForensic analysis of P2P software used (eMule, uTorrent, qBittorrent).
  • checkTemporal reconstruction of sharing sessions.
  • checkDemonstration of accused's low technical profile.
  • checkCharge reduction from distribution to possession (5 years to 1 year).

Child Pornography in Spain: Complete Legal Defense Guide

Child pornography offenses in Spain are governed by Art. 189 of the Criminal Code, with penalties ranging from 3 months (simple possession) to 9 years in prison (aggravated production/distribution). Online grooming is separately criminalized under Art. 183 CP. These crimes are investigated with specialized digital forensic tools and international cooperation through Europol, Interpol, and the ICSE database. Defense requires both deep legal knowledge and technical digital forensic expertise.

Penalty Table: Art. 189 CP & Related Offenses

OffenseArticlePenalty
Production of child pornographic materialArt. 189.1.a5 – 9 years
Distribution / disseminationArt. 189.1.b1 – 5 years
Aggravated (victim <16, organization, profit)Art. 189.25 – 9 years
Facilitating minors' access to pornographyArt. 189.46 months – 1 year
Simple possession (personal use)Art. 189.53 months – 1 year
Grooming (online contact with sexual purpose)Art. 1831 – 3 years
Grooming + physical meetingArt. 183.21 – 3 years (aggravated)

Critical Defense Strategies

Chain of Custody Challenge

If the seized device was handled without write blockers, stored without seal, or analyzed without documented protocols, the entire digital evidence can be invalidated. This is the most powerful defense tool available.

Absence of Intent (Dolo)

Possession requires knowledge and will. Automatic P2P downloads, browser cache files, and malware infections can all store illicit material without user knowledge. Forensic analysis proving involuntary storage is essential.

IP ≠ Person Identification

An IP address identifies a connection, not a person. Vulnerable WiFi networks (WEP, no password, WPS enabled), shared routers, and VPN usage all prevent conclusive identification of the downloader.

Reclassification: Distribution → Possession

P2P programs share files automatically (seeding). If the user was unaware of this mechanism, distribution charges can be reclassified as simple possession, reducing the penalty from 5 years to 1 year.

Key Supreme Court Rulings

Doctrina TSCache files do not prove intentional possession

The Supreme Court established that files found exclusively in browser cache, without organization, renaming, or deliberate storage in personal folders, do not constitute the intentional possession required by Art. 189.5 CP. The prosecution must prove voluntary storage act.

Doctrina TSSpecific judicial authorization for device search

The TS ruled that examining digital device contents requires a specific judicial order separate from the home search warrant (Art. 588 sexies a LECrim). Evidence obtained from computers found during a home search without specific device authorization is void.

Doctrina TSP2P automatic sharing and distribution intent

The Court analyzed whether automatic seeding in P2P programs constitutes distribution. It held that if the accused can demonstrate unawareness of the sharing mechanism and low technical profile, distribution intent may not be proven, allowing reclassification to possession.

The Digital Forensic Process

1

Seizure

Device sealed on-site with photographs and chain of custody document initiated.

2

Forensic Cloning

Bit-by-bit copy using write blocker. SHA-256 hash generated for original and clone comparison.

3

Hash Comparison

File hashes compared against ICSE (Interpol) and NCMEC databases to identify known illicit material.

4

Timeline Reconstruction

System logs, user sessions, and file metadata analyzed to determine who, when, and how files arrived.

quiz

FAQ: Child Pornography Distribution

What's the difference between distributing and possessing?expand_more
Simple possession (Art. 189.5 CP) carries 3 months to 1 year. Distribution (Art. 189.1.b CP) carries 1 to 5 years, significantly more severe. Distribution means making material available to third parties, actively (sending) or passively (P2P sharing).
Am I automatically distributing if I use eMule or Torrent?expand_more
Probably yes, technically. P2P programs share downloaded files automatically (seeding). The Supreme Court has convicted for distribution in these cases. However, defense can argue user was unaware of automatic sharing mechanism.
Is sharing via WhatsApp the same as P2P?expand_more
Both constitute distribution. However, direct WhatsApp sending implies unequivocal voluntary distribution: selecting file, choosing recipient, pressing send. Much harder to defend than automatic P2P sharing.
Can I be investigated for forwarding a meme with minors?expand_more
Yes. If the content contains sexual images of minors, even disguised as 'humor', forwarding constitutes distribution. Jurisprudence doesn't distinguish between 'serious' and 'joking' distribution.
Does the amount of distributed material affect the sentence?expand_more
Yes. Quantity, systematicity, and distribution reach are aggravating factors. Distributing hundreds of files through P2P over months is more severe than sharing an isolated file.
What if I administer a group or channel where material is shared?expand_more
Administering a group, forum, or Telegram channel sharing child exploitation material can be classified as aggravated distribution or even criminal organization (Art. 570 bis CP). Sentences can reach 9 years.
Can they trace who downloaded files I shared?expand_more
Yes. Police use specific software connecting to P2P networks, recording which IPs share files with known hashes. The connection between your IP and the file hash is the main prosecution evidence.
Do foreign servers protect me?expand_more
No. Child pornography investigations are transnational. Europol and Interpol coordinate international operations. VPN providers can be required to provide connection data.
Does dark web distribution carry heavier penalties?expand_more
Yes. Using anonymization tools (Tor, VPN) and encrypted networks indicates premeditation and technical sophistication, which courts assess as aggravating. Additionally, distribution through dark web forums or markets may trigger the criminal organization aggravator.
Can encrypted communications be used as evidence?expand_more
Encrypted communications (Signal, Telegram secret chat) require judicial authorization for interception. If police accessed these communications without a warrant or through unauthorized techniques, defense can request exclusion as illegally obtained evidence.
Is sentence suspension possible in distribution cases?expand_more
If the imposed sentence doesn't exceed 2 years and the convicted has no prior record, suspension is technically possible (Art. 80 CP). However, judges are very reluctant in these cases. Defense must prove exceptional circumstances: charge reduction to possession, cooperation with investigation, and voluntary psychological treatment.

Do you need specialised legal assistance?

The judicial system is complex. We have the criminal-law specialisation and technical resources required to take on the defence.

call