{"id":2138,"date":"2026-04-22T08:00:00","date_gmt":"2026-04-22T07:00:00","guid":{"rendered":"https:\/\/ic-services.io\/?p=2138"},"modified":"2026-10-21T14:14:51","modified_gmt":"2026-10-21T13:14:51","slug":"interception-legale-espagne-lgtel","status":"publish","type":"post","link":"https:\/\/ic-services.io\/fr\/resources\/blog\/lawful-interception-spain-lgtel\/","title":{"rendered":"Exigences de l'Espagne en mati\u00e8re d'interception l\u00e9gale dans le cadre de la LGTEL"},"content":{"rendered":"

Interception l\u00e9gale<\/a> Les obligations qui incombent \u00e0 l'Espagne en vertu de la LGTEL imposent des exigences sp\u00e9cifiques en mati\u00e8re de conformit\u00e9 aux op\u00e9rateurs. Le secteur des t\u00e9l\u00e9communications espagnol est r\u00e9gi par un cadre r\u00e9glementaire qui impose aux op\u00e9rateurs des obligations claires et ex\u00e9cutoires visant \u00e0 faciliter l'interception l\u00e9gale. Au c\u0153ur de ce cadre se trouve la Ley General de Telecomunicaciones (LGTEL), r\u00e9cemment mise \u00e0 jour par la loi n\u00b0 11\/2022, qui transpose le Code europ\u00e9en des communications \u00e9lectroniques dans le droit espagnol. Pour les op\u00e9rateurs qui p\u00e9n\u00e8trent ou se d\u00e9veloppent sur le march\u00e9 espagnol \u2014 notamment les MVNO, les fournisseurs OTT et les op\u00e9rateurs internationaux \u2014, il est essentiel de bien comprendre les dispositions de la LGTEL relatives \u00e0 l\u2019interception l\u00e9gale ainsi que le contexte institutionnel plus large afin de se mettre en conformit\u00e9 et d\u2019\u00e9viter toute mesure coercitive.<\/p>\n\n\n\n

Spain’s approach to lawful interception is shaped by its legal tradition, its institutional structure, and the practical requirements of a market that serves over 50 million mobile subscribers. The interplay between the LGTEL, the Ley de Enjuiciamiento Criminal (LECrim), for police and judicial investigations, and Organic Law 2\/2002, under which interceptions by the intelligence service (Centro Nacional de Inteligencia, CNI) require prior authorisation by a Supreme Court judge, creates a multi-layered compliance environment that operators must navigate carefully.<\/p>\n\n\n\n

Interception l\u00e9gale en Espagne : Exigences LGTEL<\/h2>\n\n\n\n

The LGTEL establishes the general framework for telecommunications regulation in Spain, including the obligations of operators regarding national security and lawful interception. The core obligation is article 58 of Ley 11\/2022. It applies to operators of public networks and providers of number-based interpersonal communications and internet access services, including MVNOs, who must carry out judicially authorised interceptions at their own cost. The implementing detail is in Royal Decree 424\/2005 (arts. 83\u2013101). Number-independent OTT services are outside the LGTEL interception duty, but under art. 588 ter e LECrim they must still assist the court and judicial police in executing an interception order.<\/p>\n\n\n\n

The procedural basis for ordering an interception is found in the LECrim (Criminal Procedure Act), which was significantly amended in 2015 through Ley Org\u00e1nica 13\/2015. The amendments modernised Spain’s interception framework, introducing detailed provisions for the interception of digital communications, the use of technical surveillance measures, and the handling of metadata. Under the LECrim, interceptions must be authorised by a judge (juez de instrucci\u00f3n), usually upon request by the public prosecutor or the police, and must relate to intentional offences punishable by a maximum of at least three years, to organised crime or terrorism, or to offences committed using information and communication technologies (art. 588 ter a LECrim). Orders run for up to three months and can be extended to a maximum of 18 months. In urgent terrorism cases the Minister of the Interior may order the interception, subject to judicial confirmation (art. 588 ter d.3 LECrim).<\/p>\n\n\n\n

Les amendements de 2015 ont \u00e9galement introduit des dispositions sp\u00e9cifiques pour l'interception des communications bas\u00e9es sur l'IP, la capture des donn\u00e9es stock\u00e9es sur les appareils (avec une autorisation judiciaire appropri\u00e9e) et l'utilisation d'outils de surveillance \u00e0 distance dans certaines circonstances. Ces dispositions refl\u00e8tent la nature \u00e9volutive des technologies de communication et garantissent que le cadre juridique espagnol suit le rythme des changements dans la fa\u00e7on dont les gens communiquent. Pour les op\u00e9rateurs, cela signifie que les capacit\u00e9s de LI doivent aller au-del\u00e0 de l'interception traditionnelle de la voix et des SMS pour englober les services VoLTE, les sessions de donn\u00e9es et les services de messagerie bas\u00e9s sur IP.<\/p>\n\n\n\n

The Role of the CNMC and the Sanctioning Authority<\/h2>\n\n\n\n

The CNMC is Spain’s national regulatory authority for telecommunications, responsible for overseeing the market, with a primary focus on competition and consumer protection. Operators notify the CNMC’s Registro de operadores before starting service (art. 7 LGTEL). Breaches of the LI obligations, however, are serious infringements under art. 107.43 LGTEL, sanctioned by the Secretary of State for Telecommunications and Digital Infrastructure with fines of up to EUR 2 million.<\/p>\n\n\n\n

Reports from services charg\u00e9s de l'application de la loi<\/a> about non-compliant operators can trigger sanction proceedings. Besides the fine, refusing to cooperate with an interception order can lead to criminal liability for disobedience (art. 588 ter e LECrim). For MVNOs and smaller operators, the risk of enforcement action is a powerful motivator for proactive compliance.<\/p>\n\n\n\n

Le syst\u00e8me SITEL et l'interface avec les forces de l'ordre<\/h2>\n\n\n\n

One of the most distinctive features of Spain’s LI landscape is SITEL, the Ministry of the Interior’s interception system used by the National Police and Guardia Civil to receive intercepted traffic. The law speaks of the receiving centres (centros de recepci\u00f3n) of the authorised agents (agentes facultados: police, Guardia Civil, CNI), to which operators must establish connectivity and deliver intercepted communications (art. 58 LGTEL; RD 424\/2005, art. 95).<\/p>\n\n\n\n

SITEL was originally developed in the early 2000s and has undergone multiple upgrades to support modern communications technologies. Orders are judicial orders served by the judicial police, and the operator confirms activation by the means agreed with the requesting agency (RD 424\/2005, art. 99). Operators must implement the required handover interfaces towards the receiving centres for intercept-related information (HI2) and content of communications (HI3), in addition to the agreed order-handling procedure (HI1).<\/p>\n\n\n\n

The handover interfaces and formats are defined by technical specifications issued by the ministry responsible for telecommunications (art. 58.10 LGTEL). The receiving centres of the authorised agents provide the connection details during onboarding. This can be a source of difficulty for foreign operators unfamiliar with the Spanish institutional landscape, as the information is not always readily accessible and the onboarding process may require navigating bureaucratic procedures that are less transparent than in some other European markets.<\/p>\n\n\n\n

It is worth noting that SITEL has been the subject of public debate in Spain, particularly regarding its oversight mechanisms and the potential for misuse. The system’s operation is subject to judicial control: interceptions require a judicial authorisation or, in urgent terrorism cases, a ministerial order that a judge must confirm. However, operators should be aware of the political and public sensitivity surrounding SITEL and ensure that their compliance processes include robust safeguards for the protection of intercepted data.<\/p>\n\n\n\n

Obligations de conservation des donn\u00e9es<\/h2>\n\n\n\n

L'Espagne conservation des donn\u00e9es<\/a> Ce r\u00e9gime s'applique en vertu de la loi n\u00b0 25\/2007 (loi sur la conservation des donn\u00e9es), qui impose aux op\u00e9rateurs de conserver certaines cat\u00e9gories de donn\u00e9es relatives au trafic et \u00e0 la localisation pendant une p\u00e9riode de douze mois. Ces donn\u00e9es doivent pouvoir \u00eatre communiqu\u00e9es aux autorit\u00e9s comp\u00e9tentes en r\u00e9ponse \u00e0 une d\u00e9cision judiciaire valide. Les cat\u00e9gories de donn\u00e9es conserv\u00e9es comprennent les num\u00e9ros appelants et appel\u00e9s, la date, l\u2019heure et la dur\u00e9e des communications, le type de service utilis\u00e9, ainsi que les donn\u00e9es de localisation pour les communications mobiles.<\/p>\n\n\n\n

Alors que les arr\u00eats de la CJUE dans les affaires Digital Rights Ireland et Tele2 Sverige ont remis en question la compatibilit\u00e9 de la conservation g\u00e9n\u00e9rale des donn\u00e9es avec les droits fondamentaux de l'UE, l'Espagne a maintenu sa l\u00e9gislation sur la conservation des donn\u00e9es, et les op\u00e9rateurs sont cens\u00e9s se conformer \u00e0 ses dispositions jusqu'\u00e0 ce que la loi soit modifi\u00e9e ou annul\u00e9e par les tribunaux espagnols. Les op\u00e9rateurs devraient suivre de pr\u00e8s l'\u00e9volution de la situation dans ce domaine, car les changements apport\u00e9s au r\u00e9gime de conservation des donn\u00e9es pourraient avoir des cons\u00e9quences importantes sur leurs obligations de conformit\u00e9 et leur infrastructure technique.<\/p>\n\n\n\n

L'interaction entre la conservation des donn\u00e9es et l'interception en temps r\u00e9el est importante. Alors que la conservation des donn\u00e9es implique le stockage et la divulgation ult\u00e9rieure de m\u00e9tadonn\u00e9es historiques, l'interception l\u00e9gale implique la capture et la fourniture en temps r\u00e9el de m\u00e9tadonn\u00e9es et de contenu. Les op\u00e9rateurs doivent maintenir des capacit\u00e9s techniques distinctes mais susceptibles de se chevaucher pour les deux fonctions, et leurs syst\u00e8mes doivent \u00eatre en mesure de traiter les deux types de demandes de mani\u00e8re efficace et dans le respect des exigences l\u00e9gales applicables.<\/p>\n\n\n\n

D\u00e9fis sp\u00e9cifiques aux MVNO<\/h2>\n\n\n\n

MVNOs operating in Spain face the familiar challenge of legal responsibility for interception combined with technical dependence on the host MNO. The LGTEL does not provide a reduced obligation for virtual operators. If you operate a public network or provide number-based interpersonal communications or internet access services, you must be able to comply with lawful interception orders. This means either deploying your own LI infrastructure or establishing a formal, technically validated arrangement with your host MNO.<\/p>\n\n\n\n

The Spanish market has several active MVNOs, many of which operate on the networks of the major MNOs \u2014 Movistar (Telef\u00f3nica), MasOrange, Vodafone and Digi. The LI arrangements between MVNOs and their host MNOs vary significantly, and operators should not assume that their MNO partner will handle all interception obligations automatically. Explicit contractual provisions covering the scope of interception services, response times, data delivery formats, and cost allocation are essential.<\/p>\n\n\n\n

One area of particular complexity is the MVNO’s connectivity to the receiving centres of the authorised agents. In some cases, the host MNO may provide this connectivity as part of the wholesale arrangement. In other cases, the MVNO may need to establish its own connection. The appropriate model depends on the MVNO’s architecture, the terms of its wholesale agreement, and the requirements of the relevant law enforcement agencies. Operators should clarify this point early in the planning process to avoid delays in achieving compliance.<\/p>\n\n\n\n

VoLTE interception is another area where MVNOs in Spain must pay close attention. As Spanish operators retire 3G and move voice to VoLTE, the technical requirements for voice interception have changed significantly. MVNOs that rely on their host MNO for VoLTE services must ensure that voice interception is included in their LI arrangements and that the technical implementation meets the requirements of the receiving centres.<\/p>\n\n\n\n

Exigences techniques et alignement sur l'ETSI<\/h2>\n\n\n\n

Spain’s technical requirements for lawful interception are generally aligned with ETSI standards, but with the national adaptations set out in the ministry’s technical specifications (art. 58.10 LGTEL). Operators must support the delivery of IRI and CC through interfaces that conform to these specifications. The IRI must include comprehensive metadata about the intercepted communication, including identifiers (MSISDN, IMSI, IMEI), timestamps, cell and location information, and IP addressing data where applicable.<\/p>\n\n\n\n

Pour les interceptions vocales, le contenu doit \u00eatre fourni sous la forme d'un flux audio en temps r\u00e9el. Pour les interceptions de donn\u00e9es, le contenu consiste en des paquets IP associ\u00e9s aux sessions de la cible. La mise en \u0153uvre technique doit permettre plusieurs interceptions simultan\u00e9es et ne doit pas entra\u00eener de d\u00e9gradation perceptible du service de la cible ou du r\u00e9seau en g\u00e9n\u00e9ral. Les op\u00e9rateurs doivent \u00e9galement mettre en \u0153uvre des m\u00e9canismes de gestion s\u00e9curis\u00e9e des ordres d'interception, y compris l'authentification, le cryptage et l'enregistrement des audits.<\/p>\n\n\n\n

Testing and validation of the operator’s LI capability is an important part of the compliance process. While the formal testing procedures may vary depending on the authorised agent and its receiving centre, operators should expect to demonstrate their systems’ capabilities through a series of test scenarios covering voice, SMS, and data interception. Successful completion of these tests is a prerequisite for receiving live interception orders.<\/p>\n\n\n\n

Recommandations pratiques pour les op\u00e9rateurs<\/h2>\n\n\n\n

Pour les op\u00e9rateurs qui s'appr\u00eatent \u00e0 se conformer aux exigences espagnoles en mati\u00e8re de LI, plusieurs mesures pratiques doivent \u00eatre prises en priorit\u00e9. Tout d'abord, examinez la LGTEL, la LECrim et la Ley 25\/2007 pour comprendre toute la port\u00e9e de vos obligations l\u00e9gales. Faites appel \u00e0 un conseiller juridique espagnol sp\u00e9cialis\u00e9 dans les t\u00e9l\u00e9communications, car l'interaction entre les diff\u00e9rents instruments juridiques n\u00e9cessite des connaissances sp\u00e9cialis\u00e9es.<\/p>\n\n\n\n

Second, obtain the current technical specifications from the ministry responsible for telecommunications, and contact the receiving centres of the authorised agents (police, Guardia Civil, CNI) to agree the connections and tests. Then plan your technical implementation. Plan the six to twelve months of build and testing before launch: once live, an order without its own deadline must be executed by noon on the next working day (RD 424\/2005, art. 99), and the handover interfaces must be ready at all times (art. 58.10 LGTEL).<\/p>\n\n\n\n

Third, if you are an MVNO, review your wholesale agreement with your host MNO and ensure that LI obligations are explicitly addressed. Clarify the technical model for interception, the responsibilities of each party, and the arrangements for connectivity to the receiving centres of the authorised agents. Fourth, implement robust internal processes for handling interception orders, including access controls, confidentiality procedures, and audit trails. Finally, stay informed about regulatory developments, particularly regarding data retention and any changes to the SITEL system or its technical requirements.<\/p>\n\n\n\n

Conclusion<\/h2>\n\n\n\n

Spain’s lawful interception framework, anchored by article 58 of the LGTEL and Royal Decree 424\/2005 and operationalised through the receiving centres of the authorised agents, presents a comprehensive compliance challenge for operators. The combination of broad legal obligations, several receiving centres with their own connection requirements, active data retention requirements, and the practical complexities of the MVNO model demands careful planning and sustained attention. Operators that invest in understanding the Spanish regulatory landscape and building compliant LI capabilities from the outset will be well positioned to operate successfully in one of Europe’s largest and most dynamic telecommunications markets.<\/p>\n\n\n\n

La mise en conformit\u00e9 de l'Espagne en mati\u00e8re d'interception l\u00e9gale n\u00e9cessite un engagement permanent avec les autorit\u00e9s r\u00e9glementaires. Les op\u00e9rateurs doivent s'assurer que leur mise en \u0153uvre de l'interception l\u00e9gale en Espagne r\u00e9pond aux exigences techniques et proc\u00e9durales.<\/p>\n\n\n\n

Articles connexes<\/h2>\n\n\n\n

Pour en savoir plus sur des sujets connexes, consultez les articles suivants :<\/p>\n\n\n\n