Dawn Raids on Companies in Spain (2026): What to Do If Your Business Is Searched, Seized or Interviewed

Dawn raids in Spain have become a live operational risk for any company exposed to economic-crime investigation, and the first hour determines how much control you keep. When investigators arrive unannounced with a judicial warrant, the response your reception desk, security team and management give in those opening minutes shapes the entire investigation, what gets seized, whether privilege is preserved, and whether you later face an additional charge of obstruction. This article sets out what to do during dawn raids Spanish authorities carry out against company premises, grounded in the Ley de Enjuiciamiento Criminal, the Código Penal, AEPD data-protection guidance and Spanish case law.

It takes a clear position on the tactical choices you face on site, and it ends with a decision framework so you can act rather than deliberate.

Quick actions during a dawn raid, immediate checklist

Dawn raids that investigators execute typically begin at opening time, when staffing is thin and decision-makers may not yet be present. The following prescriptive sequence covers the first 0–60 minutes, the 60–180 minute window, and the first 24 hours. Print it, brief reception and security on it, and store it where non-lawyers can reach it in seconds.

First 0–60 minutes, reception, identification and the warrant

• Stay calm and do not obstruct. Obstruction can constitute a criminal offence under the Código Penal; physically blocking access or destroying material is the single worst response.
• Record the exact arrival time and the full names, ranks and unit of every officer (Guardia Civil, Policía Nacional, Mossos d’Esquadra, Ertzaintza or other) plus the presence of any Fiscalía representative or Letrado de la Administración de Justicia.
• Request to view the warrant, the auto ordering the search, and read its scope: the premises authorised, the subject matter, and the categories of material covered.
• Designate a single company liaison, ideally the General Counsel or a senior manager, to accompany the team at all times. All communication flows through this one person.
• Trigger the call tree immediately. Notify the CEO, CFO, GC and external criminal defence counsel that a search is underway.
• Instruct staff to preserve everything. No deletion, no shredding, no wiping of devices, no messaging to colleagues about the raid.

60–180 minutes, logging, the acta and privileged material

• Shadow the search room by room. The liaison and, once present, counsel should observe and take a parallel written and photographic record of what officers inspect and remove.
• Log every device and document seized, serial numbers, asset tags, locations, and cross-check against the officers’ inventory.
• Request a copy of the acta de registro, the official record of the search, and read it before signing. Note any disagreement in writing on the acta itself.
• Identify and flag privileged material, legal advice files, litigation folders, communications with external counsel, and formally assert privilege before anything is opened or copied.
• Limit employee interviews. Staff are not obliged to submit to informal on-the-spot questioning; keep interactions to the liaison unless counsel advises otherwise.
• Record all photography officers take, and note whether servers are imaged on site or physically removed.

First 24 hours, counsel, custody and communications hold

• Confirm external criminal defence counsel is engaged and, where possible, physically present before the search concludes.
• Preserve the chain of custody for anything imaged or copied, and secure your own forensic copy where lawful.
• Activate the internal notification protocol, a controlled, need-to-know briefing to the board and senior management, kept privileged where possible.
• Place a hold on public relations and investor relations. Say nothing externally until counsel has reviewed the exposure and any secrecy-of-investigation constraints.

The single most valuable action during a dawn raid is designating one calm liaison who documents everything. Documentation is what later supports a challenge; panic is what creates fresh liability.

The legal basis: who can search, when and on what authority

Understanding why dawn raids are lawful, and where their limits lie, lets you assert your rights without tipping into obstruction. Searches of company premises are governed principally by the Ley de Enjuiciamiento Criminal, with corporate criminal liability (introduced into the Código Penal and developed by Article 31 bis and following) and obstruction offences flowing from the Código Penal.

Warrant types and the acta de registro, what to check

Entry into and search of a constitutionally protected domicilio generally requires judicial authorisation, an auto issued by the investigating court (Juzgado de Instrucción), unless there is consent or a recognised exception. The distinction between a company’s ordinary premises and a constitutionally protected space matters: Spanish courts have recognised that legal persons enjoy certain protections and that areas functioning as the seat of corporate decision-making may attract heightened safeguards. When you receive the warrant, check four things:

• The issuing authority and date, is it a valid auto from a competent court?
• The premises specified, does it cover the exact address and areas being entered?
• The subject-matter scope, what offences and categories of evidence are named?
• The proportionality reasoning, the warrant should articulate why the search is necessary.

The acta de registro is the contemporaneous minute of the search. It should record who was present, what was inspected, what was seized and any objections raised. Insist on receiving a copy, it is your primary evidentiary record.

Who can be present

Depending on the case and territory, the team may comprise Guardia Civil officers (often involved in economic-crime investigations coordinated with the Fiscalía), Policía Nacional, or regional forces such as the Mossos d’Esquadra in Catalonia or the Ertzaintza in the Basque Country. Under the Ley de Enjuiciamiento Criminal, the Letrado de la Administración de Justicia ordinarily attends to authenticate the acta in a court-ordered entry and search, and the prosecutor’s office may coordinate the investigative strategy. Knowing the composition tells you who holds authority to narrow or clarify the search on site.

Seizure of electronic evidence, servers, laptops, phones, cloud and forensic steps

Electronic evidence is the centre of gravity in modern corporate investigations, and seizure of electronic evidence in Spain follows rules that reward a prepared response. Authorities can seize servers, laptops and mobile phones during a business search, provided those devices fall within the warrant’s scope. The Ley de Enjuiciamiento Criminal contains specific provisions on the seizure and examination of computers and electronic storage devices, which as a rule require judicial authorisation. How they proceed, and what you do in parallel, has lasting consequences.

On-site imaging vs. physical seizure

Investigators broadly choose between two approaches. They may create a forensic image of data on site and leave the hardware in place, or they may physically remove devices and servers for later examination. Each has trade-offs:

• On-site imaging minimises operational disruption because your hardware stays, but it can capture vast quantities of data indiscriminately, including material outside the warrant’s true scope.
• Physical seizure removes the risk of on-site tampering allegations but can paralyse operations if production servers or key personnel devices leave the building.

Where imaging is used, the liaison should request that copying be limited to material within scope and, critically, request a mirror copy for the company so operations can continue and so you retain the ability to review what was taken.

Handling encrypted devices and compelled assistance

Encryption and passwords raise sensitive questions during a search. Companies and individuals face genuine limits on compelled decryption: the privilege against self-incrimination protects the individual against being forced to actively produce a passphrase in a way that testifies to knowledge or control. Distinguish carefully between the company’s data-management obligations and an individual’s constitutional protection. Do not volunteer to unlock personal devices without counsel’s advice, and do not destroy or reset anything, that risks an obstruction charge under the Código Penal.

Chain of custody, forensic imaging and data protection

Protecting your later ability to challenge the evidence depends on the chain of custody. Record hash values where imaging is performed, note who handled each device and when, and secure your own contemporaneous log. Seizure of electronic evidence in Spain also engages data-protection duties: seized systems will contain personal data of employees, clients and third parties. The Agencia Española de Protección de Datos (AEPD) provides guidance on the obligations that arise when personal data is processed or transferred, and companies should assess notification and record-keeping duties even where the transfer to authorities is lawful. Bringing in a qualified forensic provider quickly, one who can supervise imaging and preserve metadata integrity, is one of the highest-value early decisions.

Privilege, trade secrets and confidentiality protections during a dawn raid

Legal privilege and trade-secret protection are asserted on site or lost. During a dawn raid, you cannot reliably claw back material after the event that you failed to flag as privileged in the moment.

Privilege for in-house counsel, limits and risks

Spanish professional secrecy (secreto profesional), protected by the Constitution, the Estatuto General de la Abogacía Española and the deontological framework of the Consejo General de la Abogacía Española (CGAE), covers the lawyer–client relationship. The critical practical point is that communications with external, independent counsel enjoy the strongest protection, while the position of in-house counsel is narrower and more contested. Do not assume every internal legal email is protected. Mark clearly privileged material, keep external-counsel advice segregated, and assert privilege expressly the moment such material is reached during the search.

Trade secrets, sealed submissions and protective measures

For commercially sensitive material that is not privileged but is a protected trade secret (secreto empresarial, governed by Ley 1/2019 de Secretos Empresariales), the tactic is different. Request that such material be placed in sealed envelopes for later judicial review rather than examined openly on site, and ask the court for a protective process, potentially inspection by a neutral expert under conditions that prevent unnecessary disclosure to competitors or the wider case file.

Practical tech measures to assert confidentiality

• Maintain a clearly labelled “Legal, Privileged” repository so privileged material can be identified instantly.
• Keep external-counsel correspondence in a segregated system.
• Have the liaison propose a lawyer-only review room where flagged material is reviewed by counsel before any copying, and record every such request on the acta.

Practical coordination, internal counsel, management and external criminal defence counsel

A raid tests your organisation’s ability to coordinate under pressure. Clear roles prevent the improvisation that creates legal exposure.

Immediate roles, CEO, CFO, GC, security and communications

• General Counsel (or designated liaison), leads on site, holds the single line of communication with officers, asserts privilege, signs the acta with any noted objections.
• Security / reception, receives the team, verifies identities, records arrival time, and calls the liaison and counsel; does not argue or delay entry.
• CEO / CFO, activate governance and board notification, authorise engagement of external counsel and forensic vendors, and enforce the external-communications hold.
• Communications lead, prepares holding lines but publishes nothing until cleared by counsel, respecting any secrecy-of-investigation obligation.

Checklist for external counsel engagement

• Instruct external criminal defence counsel the moment a search is announced, corporate criminal defence in Spain begins on site, not after.
• Engage a forensic imaging provider to supervise device handling and preserve your parallel copy.
• Where regional or specialised jurisdiction applies, add local specialist counsel.
• Preserve privilege in all internal communications about the raid by routing them through counsel and marking them accordingly.

Remedies and how to challenge seizures or interviews

Not every seizure is final, and irregular searches can be contested. Knowing the routes and their timing lets you act while the position is still fluid.

Obtaining the inventory and copies

Your first remedial step is documentary: secure a full copy of the acta de registro and the inventory of seized items. Without these you cannot frame a precise challenge. Request them on the day; if refused, record the refusal.

When to apply for judicial review

Challenges to the search or to specific seizures are generally raised before the Juzgado de Instrucción handling the matter, typically through a recurso de reforma and/or recurso de apelación, and, in appropriate constitutional cases, ultimately by recurso de amparo before the Tribunal Constitucional once ordinary remedies are exhausted. Where the search’s validity is genuinely in doubt, for example, a defect in the authorising auto, move quickly, because delay weakens both the practical and legal position. In defined administrative contexts a recurso contencioso-administrativo may also be relevant.

Evidence suppression and appeal strategy

Where evidence was obtained in breach of fundamental rights, Spanish law provides for its exclusion, and the doctrine developed by the Tribunal Supremo and Tribunal Constitucional can also affect evidence derived from it (the so-called prueba refleja). Privileged material seized without a proper lawyer-only review protocol, or material outside the warrant’s scope, are among the strongest suppression candidates. European Court of Human Rights standards on privacy, fair trial and effective remedies can reinforce suppression and appeal arguments in complex cases. Building this record starts with the contemporaneous notes taken during the raid, which is why on-site documentation is so decisive.

Comparison table, choosing a tactical response when raided

On site, you face one strategic choice: how much to cooperate. There are three broad postures, and this decision-support table compares them dimension by dimension. Our position is unambiguous, for the overwhelming majority of companies facing a valid warrant, controlled cooperation (Option A or B) is correct, and outright resistance (Option C) is justified only in narrow, clear-cut circumstances.

Decision framework, choose one:

• Choose Option A (Full cooperation) when the warrant is clearly valid, obstruction risk is material, and the company prioritises limiting criminal exposure and a swift resolution.
• Choose Option B (Limited cooperation) when privileged documents or trade secrets are likely present and there is time to negotiate protocols without provoking forceful escalation. For most companies with sensitive legal or commercial material, this is the default recommended posture.
• Choose Option C (Resist) only when the warrant is demonstrably defective, for example, no valid judicial authorisation, and immediate judicial review is achievable. Otherwise the operational and legal risk is too high to justify.

Practical annexes, model language, checklists and templates

Model reception script for security or management

“Good morning. I am [name], [role]. I acknowledge your authority and we will not obstruct. I am formally noting the time and your names. I am calling our General Counsel and legal representative now and ask that our designated liaison accompany you throughout. May I see the warrant, please?”

Email template to external counsel and forensic vendor

“URGENT, search in progress at [site] from [time]. Force: [Guardia Civil / other]. Warrant scope: [summary]. Devices at risk: [servers/laptops/phones]. Please attend on site immediately and instruct forensic imaging support to preserve metadata and secure a company mirror copy. Privileged material flagged; lawyer-only review requested. Reply with ETA.”

A fuller printable dawn raid checklist for managers and compliance officers should be kept both as an un-gated on-page resource for immediate use and as a downloadable PDF for offline reference.

Conclusion: preparation is the best defence against a dawn raid in Spain

Dawn raids are won or lost in the first hour, and the companies that emerge with their rights intact are those that prepared before the knock at the door. A clear liaison, a rehearsed reception script, an accessible checklist, immediate engagement of external criminal defence counsel and disciplined documentation of everything seized are what preserve your ability to assert privilege, protect trade secrets and later challenge irregular seizures. With continued economic-crime enforcement and Spain’s corporate criminal-liability framework under the Código Penal, controlled cooperation, asserting your rights without obstructing, is the recommended posture for the vast majority of businesses. Treat this guide as a planning tool now, not a document you read for the first time while investigators are already inside.

This article is general guidance for Spain and not a substitute for legal advice. If a search is underway or anticipated, contact qualified local criminal defence counsel immediately. Related resources, including a printable dawn raid checklist for managers and compliance officers in Spain, guidance on how to challenge seizure of electronic evidence in Spain, and material on designing corporate compliance programmes to reduce criminal liability in Spain, support this pillar.

Further reading on GLE: El mejor abogado penalista de España.

Sources

1. Boletín Oficial del Estado (BOE), Ley de Enjuiciamiento Criminal & Código Penal (consolidated texts)
2. Fiscalía General del Estado, official guidance and protocols
3. Guardia Civil, official site and procedural pages
4. Agencia Española de Protección de Datos (AEPD)
5. Consejo General de la Abogacía Española (CGAE)
6. Tribunal Supremo / CENDOJ, Poder Judicial de España
7. European Court of Human Rights (ECHR)