Skip to content

Criminal Lawyers in Child Pornography Distribution

Technical defence under Art. 189.1.b CP. Challenging intent to share and differentiating automatic seeding

Article 189.1.b CP punishes distributing, disseminating, facilitating or displaying child pornography material with imprisonment of 1 to 5 years, a penalty considerably higher than mere possession for personal use (3 months to 1 year, Article 189.5 CP). Distribution requires an act of making the material available to third parties, whether active - direct sending - or arising from the automatic operation of P2P networks, where the defence can challenge whether there was a genuine intention to share. Accessing encrypted communications as evidence requires express judicial authorisation. Our defence distinguishes voluntary sending from unconsented automatic distribution and examines the legality of the interception of communications and of identification through the IP address.

Child Pornography Distribution: Art. 189.1.b of the Criminal Code

The offence of distribution, dissemination, facilitation or exhibition of child pornography (Art. 189.1.b CP) protects the sexual indemnity of minors and the dignity inherent to their condition. The provision sanctions with 1 to 5 years' prison the production, sale, distribution, dissemination, exhibition or facilitation of such activities regarding pornographic material elaborated using minors or persons with disabilities. Distribution is the most frequently prosecuted modality: most proceedings of Art. 189 CP originate from police detection of P2P downloads and sharing through undercover operations and specific tracking software. The offence covers "making available" to third parties and also possession for those purposes, which distinguishes it from mere possession for personal use (Art. 189.5 CP), with decisive practical consequences in criminal classification.

The difference between distribution and simple possession is punitively transcendental. Possession for personal use (Art. 189.5 CP) carries 3 months to 1 year of prison or fine, without necessary actual imprisonment and with possibility of sentence suspension when there are no prior records. Distribution (Art. 189.1.b CP) multiplies the penalty up to 5 years, requires greater proof of active will to make material available to third parties, and sensibly hinders suspension. The technical frontier between both modalities is "making available": any act allowing third parties to access the material —direct sending, uploading to shared cloud, P2P sharing, streaming exhibition, forum publication, distribution in Telegram groups— integrates distribution. The nuclear procedural problem is that many P2P programs automatically share downloaded files (seeding mechanism), turning what the user perceived as simple download into technically consummated distribution.

The commissive modalities present very different degrees of gravity. Active distribution through direct sending by email, WhatsApp, Telegram or upload to forums and exchange platforms is the most seriously reproachable modality: it implies unequivocal voluntary act of selecting material, choosing recipient and executing sending. Passive distribution by P2P seeding (eMule/eDonkey, BitTorrent, uTorrent, qBittorrent) is technically sharing but subjectively questionable: many users are unaware of the automatic sharing mechanism or default configuration of "Incoming" folders. The administration of groups, forums or channels where material is shared can integrate aggravated distribution or even criminal organization (Art. 570 bis CP). Dark web operations through Tor or encrypted networks with cryptocurrency payment systems are investigated with particular intensity due to their technical sophistication, although the organisation aggravation (Art. 189.2.f CP) must be proven, not presumed. Supreme Court case-law has had to outline case by case the scope of distribution intent in scenarios of automatic seeding.

Technical defence is built on four axes. First, the unawareness of automatic seeding: when the accused used P2P programs for their common use for legal downloads (movies, software, music), being unaware of the automatic sharing mechanism of downloaded files, distribution intent is excluded; computer expert evidence can prove the user's technical profile, default software configuration, absence of manual changes to sharing settings. Second, the reclassification to simple possession (Art. 189.5 CP): the absence of will to make material available to third parties, combined with low technical profile and casual software use, allows degrading the classification from distribution (1-5 years) to possession (3 months-1 year), with decisive consequences in sentence suspension. Third, the challenge of authorship attribution: in vulnerable wifi networks, shared devices in households with multiple inhabitants, simultaneous sessions of different users, the specific attribution of downloads and sharing to a particular person may be doubtful, the in dubio pro reo principle operating. Fourth, procedural defects: defects in the digital chain of custody, absence of write blocker, discrepant hashes, irregularities in entry and search, are potential evidentiary nullities.

In current forensic practice, police operations on distribution have reached massive dimensions. The BIT-Technological Investigation Brigade of the National Police and the GDT-Telematic Crime Group of the Civil Guard use specialized software that connects to P2P networks in real time and records IP addresses sharing files with hashes catalogued as child pornography in NCMEC and Interpol's ICSE databases. International cooperations with Europol, Interpol and national agencies (FBI, BKA, Gendarmerie) have allowed simultaneous operations with hundreds of indicted persons. Organic Law 8/2021 on integral protection of childhood, the Budapest Convention on Cybercrime and Directive 2011/93/EU have hardened penalties and expanded technological investigation tools. Organic Law 1/2025 on the efficiency of the Public Justice Service is a procedural and organisational statute: it does not amend the Criminal Code or its penalties. At Alonso Sala, our criminal lawyers specialized in child pornography distribution work with forensic computer experts to analyse P2P software logs, chronologically reconstruct sharing sessions, demonstrate the accused's low technical profile and articulate defences that allow reclassification to simple possession, sentence suspension when Art. 80 CP circumstances concur, and minimization of impact on the defendant's professional trajectory and criminal record.

TECHNICAL KEYThe P2P Seeding Problem

Peer-to-peer programs (eMule, BitTorrent, uTorrent) operate under a reciprocity principle: when downloading a file, the program automatically makes it available to other users (seeding). The user seeking to download may not know their computer is simultaneously distributing that file to hundreds of people worldwide.

eMule / eDonkey

Shares automatically upon download. "Incoming" folder is public by default. User may have never configured this option.

BitTorrent

Seeding is an essential part of the protocol. Stopping sharing requires manual user action. Many users are unaware of this function.

Police Evidence

Police connect to P2P network and record IPs sharing files with illicit hashes. Your IP is documented as "distributing".

Distribution Defence Strategies

Seeding Unawareness

Proving user was unaware the program shared automatically. Expert analysis of default software configuration, absence of manual sharing settings changes, and user's technical level.

Legal Content Search

If the user searched for legal adult pornography and the program downloaded deceptively named files that turned out to be illicit, distribution intent is significantly diluted. Search terms and filenames are crucial.

Minimal Exposure Time

If file was shared only during download time (minutes or hours) and deleted immediately after, distribution was minimal and involuntary. P2P program logs and file dates (creation vs deletion) are the evidence.

Unidentified Third Party

In households with multiple inhabitants or shared devices, and especially with vulnerable wifi, attributing P2P activity to a specific person is impossible without analysing the active user session during download and sharing hours.

Why Choose Us for Distribution Defence?

Because the line between possession (3 months to 1 year) and distribution (1 to 5 years) can be in a configuration checkbox your client never touched. Our legal-technical team analyses P2P program logs, seeding dates, default configuration, and the accused's technical profile to defend reclassification to simple possession.

  • Forensic analysis of P2P software used (eMule, uTorrent, qBittorrent).
  • Temporal reconstruction of sharing sessions.
  • Demonstration of accused's low technical profile.
  • Charge reduction from distribution to possession (5 years to 1 year).

Child Pornography in Spain: Complete Legal Defence Guide

Child pornography offences in Spain are governed by Art. 189 of the Criminal Code, with penalties ranging from 3 months (simple possession) to 9 years in prison (aggravated forms, Art. 189.2), or more with violence or intimidation (Art. 189.3). Online grooming is separately criminalized under Art. 183 CP. These crimes are investigated with specialized digital forensic tools and international cooperation through Europol, Interpol, and the ICSE database. Defence requires both deep legal knowledge and technical digital forensic expertise.

Penalty Table: Art. 189 CP & Related Offences

OffenceArticlePenalty
Production of child pornographic materialArt. 189.11 – 5 years
Distribution / disseminationArt. 189.1.b1 – 5 years
Aggravated (victim <16, organization, notorious importance)Art. 189.25 – 9 years
Facilitating minors' access to pornographyArt. 1866 months – 1 year or fine
Simple possession (personal use)Art. 189.53 months – 1 year or fine
Grooming (online contact with sexual purpose)Art. 1831 – 3 years or fine
Deceiving a minor into providing sexual materialArt. 183.26 months – 2 years

Critical Defence Strategies

Chain of Custody Challenge

If the seized device was handled without write blockers, stored without seal, or analysed without documented protocols, the entire digital evidence can be invalidated. This is the most powerful defence tool available.

Absence of Intent (Dolo)

Possession requires knowledge and will. Automatic P2P downloads, browser cache files, and malware infections can all store illicit material without user knowledge. Forensic analysis proving involuntary storage is essential.

IP ≠ Person Identification

An IP address identifies a connection, not a person. Vulnerable WiFi networks (WEP, no password, WPS enabled), shared routers, and VPN usage all prevent conclusive identification of the downloader.

Reclassification: Distribution → Possession

P2P programs share files automatically (seeding). If the user was unaware of this mechanism, distribution charges can be reclassified as simple possession, reducing the maximum penalty from 5 years to 1 year.

Key Defence Criteria

Defence argumentCache files do not prove intentional possession

Files found only in the browser cache, without being organised, renamed or deliberately stored in personal folders, may not prove the intentional possession required by Art. 189.5 CP: the prosecution must prove a voluntary act of storage.

Art. 588 sexies a LECrimSpecific judicial authorization for device search

Seizing a device during a home search does not by itself authorise access to its contents: the judicial decision must specifically justify that access, or it must be authorised afterwards (Art. 588 sexies a LECrim). Evidence obtained without that authorisation may be excluded (Art. 11.1 LOPJ).

Defence argumentP2P automatic sharing and distribution intent

Automatic seeding in P2P programs does not by itself prove the intent to distribute: if the accused was unaware of the sharing mechanism and has a low technical profile, the defence can argue for reclassification as possession.

The Digital Forensic Process

1

Seizure

Device sealed on-site with photographs and chain of custody document initiated.

2

Forensic Cloning

Bit-by-bit copy using write blocker. SHA-256 hash generated for original and clone comparison.

3

Hash Comparison

File hashes compared against ICSE (Interpol) and NCMEC databases to identify known illicit material.

4

Timeline Reconstruction

System logs, user sessions, and file metadata analysed to determine who, when, and how files arrived.

FAQ: Child Pornography Distribution

What's the difference between distributing and possessing?
Simple possession (Art. 189.5 CP) carries 3 months to 1 year or a fine of 6 months to 2 years. Distribution (Art. 189.1.b CP) carries 1 to 5 years, significantly more severe. Distribution means making material available to third parties, actively (sending) or passively (P2P sharing).
Am I automatically distributing if I use eMule or Torrent?
Probably yes, technically. P2P programs share downloaded files automatically (seeding). The Supreme Court has convicted for distribution in these cases. However, defence can argue user was unaware of automatic sharing mechanism.
Is sharing via WhatsApp the same as P2P?
Both constitute distribution. However, direct WhatsApp sending implies unequivocal voluntary distribution: selecting file, choosing recipient, pressing send. Much harder to defend than automatic P2P sharing.
Can I be investigated for forwarding a meme with minors?
Yes. If the content contains sexual images of minors, even disguised as 'humor', forwarding constitutes distribution. Jurisprudence doesn't distinguish between 'serious' and 'joking' distribution.
Does the amount of distributed material affect the sentence?
Yes. Material of notable importance is a specific aggravating factor (Art. 189.2.e CP: 5-9 years), and quantity, systematicity and reach affect the specific sentence. Distributing hundreds of files through P2P over months is more severe than sharing an isolated file.
What if I administer a group or channel where material is shared?
Administering a group, forum, or Telegram channel sharing child exploitation material can be classified as aggravated distribution or even criminal organization (Art. 570 bis CP). Sentences can reach 9 years.
Can they trace who downloaded files I shared?
Yes. Police use specific software connecting to P2P networks, recording which IPs share files with known hashes. The connection between your IP and the file hash is the main prosecution evidence.
Do foreign servers protect me?
No. Child pornography investigations are transnational. Europol and Interpol coordinate international operations. VPN providers can be required to provide connection data.
Does dark web distribution carry heavier penalties?
Yes. Using anonymization tools (Tor, VPN) and encrypted networks may reveal premeditation and technical sophistication, which courts may weigh when setting the sentence (Art. 66 CP), although it is not a statutory aggravating factor. Additionally, distribution through dark web forums or markets may trigger the criminal organization aggravator.
Can encrypted communications be used as evidence?
Encrypted communications (Signal, Telegram secret chat) require judicial authorization for interception. If police accessed these communications without a warrant or through unauthorized techniques, defence can request exclusion as illegally obtained evidence.
Is sentence suspension possible in distribution cases?
If the imposed sentence doesn't exceed 2 years and the convicted has no prior record, suspension is technically possible (Art. 80 CP). However, judges are very reluctant in these cases. Defence must provide grounds for a favourable prognosis (Art. 80.1 CP): charge reduction to possession, cooperation with investigation, and voluntary psychological treatment.

Need urgent criminal defence?

Contact our specialist criminal defence lawyers. We evaluate your case confidentially.

This page is for information purposes only and does not constitute legal advice: every case requires individual assessment. How this content is produced and verified: editorial policy.

Do you need specialised legal assistance?

The judicial system is complex. We have the criminal-law specialisation and technical resources required to take on the defence.