Reading messages, sharing intimate images, accessing data: privacy has a criminal shield.
Intercepting communications, accessing devices or data, disclosing intimate images, unlawful use of personal data: Articles 197 to 201 of the Spanish Criminal Code protect privacy and the confidentiality of data. The unlawful access, consent and the digital chain of evidence are central to the defence.
In brief. the offences of discovery and disclosure of secrets (Arts. 197-201 CP) punish intercepting communications, accessing devices or data, and disclosing personal information or intimate images without consent. Article 197 bis covers unlawful access to systems (hacking). Penalties rise with disclosure, profit and sensitive data. Unlawful access and consent are decisive.
Privacy is criminally protected. Article 197 punishes seizing messages, intercepting communications or accessing personal data without consent to discover another’s secrets or invade their privacy.
Intimate images have their own text. Article 197.7 punishes disclosing images or recordings obtained with consent in a private setting, where their spread seriously harms the person — even without hacking.
Access to systems is covered. Article 197 bis criminalises unlawful access to information systems (hacking); Articles 198-199 aggravate for public officials and breach of professional secrecy.
| Offence | Article | Penalty framework | Key aggravating factor |
|---|---|---|---|
| Discovery of secrets | 197.1 | 1 – 4 years | Disclosure to third parties |
| Unlawful use of data | 197.2 | 1 – 4 years | Sensitive data |
| Disclosing intimate images | 197.7 | 3 months – 1 year | Spouse or ex-partner |
| Unlawful access (hacking) | 197 bis | 6 months – 2 years | Protected systems |
| Access tools | 197 ter | 6 months – 2 years | Widespread distribution |
| Public official | 198 | Upper half + ban | Abuse of office |
| Professional secrecy | 199 | 1 – 4 years + ban | Position of trust |
| Profit motive | 197.6 | Aggravated penalty | Commercial exploitation |
Indicative figures based on the Spanish Criminal Code. The penalty depends on the disclosure, the data and the circumstances. This table does not replace a lawyer’s analysis.
Not every access is unlawful. Consent, shared devices, a legitimate interest or the absence of a real invasion of privacy can rule out the offence. Context and the way the material was obtained are decisive.
We verify the digital chain of evidence. How the messages or images were obtained, their authenticity and the regularity of any search or seizure often determine whether the evidence — and the charge — stand.
People accused of accessing data or disclosing private material.
People whose privacy or intimate images have been invaded or spread.
Companies facing data-access or professional-secrecy disputes.
People bound by professional secrecy facing a disclosure charge.
Speak to a criminal lawyer
Criminal defence in English before the courts of Alicante and the rest of Spain, for residents and for visitors who have flown home.
Société de Conseil Juridique et Expert is a law firm with offices in Madrid, Alicante, London and Paris, specialising in criminal law, technology law and economic and corporate crime. We provide strategic guidance in complex criminal proceedings, intellectual property and technological resources for legal decision-making with advanced forensic analysis. Our multidisciplinary team combines legal experience, legal intelligence and personal attention to deliver effective solutions adapted to each case. Legal assistance available 24 hours a day and online consultations.
Copyright © 2026 Société de Conseil Juridique et Expert S.L.