合法截获 根据《电信总法》（LGTEL），西班牙对运营商设定了具体的合规要求。西班牙电信行业受监管框架约束，该框架规定了运营商在支持合法截获方面的明确且可执行的义务。 该框架的核心是《电信总法》（LGTEL），该法最近更新为第11/2022号法律，将《欧洲电子通信法典》转化为西班牙法律。 对于进入或拓展西班牙市场的运营商——包括移动虚拟网络运营商（MVNO）、OTT服务提供商和国际运营商——了解《电信总法》（LGTEL）中的合法截获（LI）条款以及更广泛的制度环境，对于实现合规并避免执法行动至关重要。.
Spain’s approach to lawful interception is shaped by its legal tradition, its institutional structure, and the practical requirements of a market that serves over 50 million mobile subscribers. The interplay between the LGTEL, the Ley de Enjuiciamiento Criminal (LECrim), for police and judicial investigations, and Organic Law 2/2002, under which interceptions by the intelligence service (Centro Nacional de Inteligencia, CNI) require prior authorisation by a Supreme Court judge, creates a multi-layered compliance environment that operators must navigate carefully.
西班牙合法拦截：LGTEL 要求
The LGTEL establishes the general framework for telecommunications regulation in Spain, including the obligations of operators regarding national security and lawful interception. The core obligation is article 58 of Ley 11/2022. It applies to operators of public networks and providers of number-based interpersonal communications and internet access services, including MVNOs, who must carry out judicially authorised interceptions at their own cost. The implementing detail is in Royal Decree 424/2005 (arts. 83–101). Number-independent OTT services are outside the LGTEL interception duty, but under art. 588 ter e LECrim they must still assist the court and judicial police in executing an interception order.
The procedural basis for ordering an interception is found in the LECrim (Criminal Procedure Act), which was significantly amended in 2015 through Ley Orgánica 13/2015. The amendments modernised Spain’s interception framework, introducing detailed provisions for the interception of digital communications, the use of technical surveillance measures, and the handling of metadata. Under the LECrim, interceptions must be authorised by a judge (juez de instrucción), usually upon request by the public prosecutor or the police, and must relate to intentional offences punishable by a maximum of at least three years, to organised crime or terrorism, or to offences committed using information and communication technologies (art. 588 ter a LECrim). Orders run for up to three months and can be extended to a maximum of 18 months. In urgent terrorism cases the Minister of the Interior may order the interception, subject to judicial confirmation (art. 588 ter d.3 LECrim).
2015 年修正案还引入了关于截取基于 IP 的通信、捕获设备上的存储数据（经适当司法授权）以及在某些情况下使用远程监控工具的具体规定。这些规定反映了通信技术不断发展的性质，确保西班牙的法律框架与人们通信方式的变化保持同步。对于运营商来说，这意味着 LI 功能必须超越传统的语音和短信拦截，涵盖 VoLTE、数据会话和基于 IP 的消息服务。.
The Role of the CNMC and the Sanctioning Authority
The CNMC is Spain’s national regulatory authority for telecommunications, responsible for overseeing the market, with a primary focus on competition and consumer protection. Operators notify the CNMC’s Registro de operadores before starting service (art. 7 LGTEL). Breaches of the LI obligations, however, are serious infringements under art. 107.43 LGTEL, sanctioned by the Secretary of State for Telecommunications and Digital Infrastructure with fines of up to EUR 2 million.
Reports from 执法机构 about non-compliant operators can trigger sanction proceedings. Besides the fine, refusing to cooperate with an interception order can lead to criminal liability for disobedience (art. 588 ter e LECrim). For MVNOs and smaller operators, the risk of enforcement action is a powerful motivator for proactive compliance.
SITEL 系统和执法界面
One of the most distinctive features of Spain’s LI landscape is SITEL, the Ministry of the Interior’s interception system used by the National Police and Guardia Civil to receive intercepted traffic. The law speaks of the receiving centres (centros de recepción) of the authorised agents (agentes facultados: police, Guardia Civil, CNI), to which operators must establish connectivity and deliver intercepted communications (art. 58 LGTEL; RD 424/2005, art. 95).
SITEL was originally developed in the early 2000s and has undergone multiple upgrades to support modern communications technologies. Orders are judicial orders served by the judicial police, and the operator confirms activation by the means agreed with the requesting agency (RD 424/2005, art. 99). Operators must implement the required handover interfaces towards the receiving centres for intercept-related information (HI2) and content of communications (HI3), in addition to the agreed order-handling procedure (HI1).
The handover interfaces and formats are defined by technical specifications issued by the ministry responsible for telecommunications (art. 58.10 LGTEL). The receiving centres of the authorised agents provide the connection details during onboarding. This can be a source of difficulty for foreign operators unfamiliar with the Spanish institutional landscape, as the information is not always readily accessible and the onboarding process may require navigating bureaucratic procedures that are less transparent than in some other European markets.
It is worth noting that SITEL has been the subject of public debate in Spain, particularly regarding its oversight mechanisms and the potential for misuse. The system’s operation is subject to judicial control: interceptions require a judicial authorisation or, in urgent terrorism cases, a ministerial order that a judge must confirm. However, operators should be aware of the political and public sensitivity surrounding SITEL and ensure that their compliance processes include robust safeguards for the protection of intercepted data.
数据保留义务
西班牙的 数据保留 该制度依据第25/2007号法律（《数据保留法》）运作，该法律要求运营商将特定类别的通信流量和位置数据保留十二个月。根据有效的司法命令，必须向主管当局提供这些数据以便披露。 保留的数据类别包括主叫号和被叫号、通信的日期、时间及时长、所使用服务的类型，以及移动通信的位置数据。.
虽然欧盟法院在爱尔兰数字权利案和斯维利亚电信公司案中的裁决对全面数据保留是否符合欧盟基本权利提出了质疑，但西班牙仍保留了其数据保留立法，运营商应遵守其规定，除非该法律被西班牙法院修订或废除。运营商应密切关注这方面的发展，因为数据保留制度的变化可能会对其合规义务和技术基础设施产生重大影响。.
数据保留与实时拦截之间的互动非常重要。数据保留涉及历史元数据的存储和后续披露，而合法拦截则涉及元数据和内容的实时捕获和交付。运营商必须为这两种功能保持独立但可能重叠的技术能力，其系统必须能够高效处理这两类请求，并符合适用的法律要求。.
MVNO 面临的具体挑战
MVNOs operating in Spain face the familiar challenge of legal responsibility for interception combined with technical dependence on the host MNO. The LGTEL does not provide a reduced obligation for virtual operators. If you operate a public network or provide number-based interpersonal communications or internet access services, you must be able to comply with lawful interception orders. This means either deploying your own LI infrastructure or establishing a formal, technically validated arrangement with your host MNO.
The Spanish market has several active MVNOs, many of which operate on the networks of the major MNOs — Movistar (Telefónica), MasOrange, Vodafone and Digi. The LI arrangements between MVNOs and their host MNOs vary significantly, and operators should not assume that their MNO partner will handle all interception obligations automatically. Explicit contractual provisions covering the scope of interception services, response times, data delivery formats, and cost allocation are essential.
One area of particular complexity is the MVNO’s connectivity to the receiving centres of the authorised agents. In some cases, the host MNO may provide this connectivity as part of the wholesale arrangement. In other cases, the MVNO may need to establish its own connection. The appropriate model depends on the MVNO’s architecture, the terms of its wholesale agreement, and the requirements of the relevant law enforcement agencies. Operators should clarify this point early in the planning process to avoid delays in achieving compliance.
VoLTE interception is another area where MVNOs in Spain must pay close attention. As Spanish operators retire 3G and move voice to VoLTE, the technical requirements for voice interception have changed significantly. MVNOs that rely on their host MNO for VoLTE services must ensure that voice interception is included in their LI arrangements and that the technical implementation meets the requirements of the receiving centres.
技术要求与 ETSI 接轨
Spain’s technical requirements for lawful interception are generally aligned with ETSI standards, but with the national adaptations set out in the ministry’s technical specifications (art. 58.10 LGTEL). Operators must support the delivery of IRI and CC through interfaces that conform to these specifications. The IRI must include comprehensive metadata about the intercepted communication, including identifiers (MSISDN, IMSI, IMEI), timestamps, cell and location information, and IP addressing data where applicable.
对于语音拦截，内容必须以实时音频流的形式传送。对于数据拦截，内容包括与目标会话相关的 IP 数据包。技术实施必须支持多路并发拦截，并且不得对目标服务或更广泛的网络造成明显的性能下降。运营商还必须实施安全管理拦截指令的机制，包括身份验证、加密和审计日志。.
Testing and validation of the operator’s LI capability is an important part of the compliance process. While the formal testing procedures may vary depending on the authorised agent and its receiving centre, operators should expect to demonstrate their systems’ capabilities through a series of test scenarios covering voice, SMS, and data interception. Successful completion of these tests is a prerequisite for receiving live interception orders.
对运营商的实用建议
对于准备遵守西班牙 LI 要求的运营商而言，应优先考虑几个实际步骤。首先，查阅 LGTEL、LECrim 和 Ley 25/2007，全面了解您的法律义务。聘请具有电信专业知识的西班牙法律顾问，因为各种法律文书之间的互动需要专业知识。.
Second, obtain the current technical specifications from the ministry responsible for telecommunications, and contact the receiving centres of the authorised agents (police, Guardia Civil, CNI) to agree the connections and tests. Then plan your technical implementation. Plan the six to twelve months of build and testing before launch: once live, an order without its own deadline must be executed by noon on the next working day (RD 424/2005, art. 99), and the handover interfaces must be ready at all times (art. 58.10 LGTEL).
Third, if you are an MVNO, review your wholesale agreement with your host MNO and ensure that LI obligations are explicitly addressed. Clarify the technical model for interception, the responsibilities of each party, and the arrangements for connectivity to the receiving centres of the authorised agents. Fourth, implement robust internal processes for handling interception orders, including access controls, confidentiality procedures, and audit trails. Finally, stay informed about regulatory developments, particularly regarding data retention and any changes to the SITEL system or its technical requirements.
结论
Spain’s lawful interception framework, anchored by article 58 of the LGTEL and Royal Decree 424/2005 and operationalised through the receiving centres of the authorised agents, presents a comprehensive compliance challenge for operators. The combination of broad legal obligations, several receiving centres with their own connection requirements, active data retention requirements, and the practical complexities of the MVNO model demands careful planning and sustained attention. Operators that invest in understanding the Spanish regulatory landscape and building compliant LI capabilities from the outset will be well positioned to operate successfully in one of Europe’s largest and most dynamic telecommunications markets.
遵守西班牙合法拦截要求与监管机构持续合作。运营商必须确保其西班牙合法拦截的实施符合技术和程序要求。.
相关文章
如需进一步了解相关主题，请浏览这些文章：
- Italy’s LI Framework: Prosecutors, the Codice and What Foreign Operators Miss
- France’s LI Landscape: CPP, CSI, CPCE and the PNIJ/GIC Channels
- 阿联酋和海湾国家的合法拦截：进入市场的欧洲运营商须知
外部资源
以下外部资源提供了更多背景资料和官方文件：
