Sentinel Alliance
Systemic Change
active

Strategic Litigation

Sentinel Alliance members filed a landmark lawsuit on May 5, 2025, in Barcelona courts against Spanish intelligence agencies CNI and Guardia Civil, alongside Israeli spyware vendors NSO Group and Candiru (Saito Tech Ltd). The case represents five Catalan victims of digital surveillance and marks the first attempt to prosecute Candiru executives directly within Spain.

Strategic Litigation

Sentinel vs NSO Group, Candiru, CNI and Guardia Civil

The lawsuit, initially filed December 23, 2024, and refiled in Barcelona after rejection by Spain's Audiencia Nacional, seeks to hold accountable both state actors and private surveillance companies for violations of fundamental rights.

The central claim alleges fundamental rights violations through unauthorized surveillance using Pegasus and Candiru spyware against Catalan civil society members.

Alleged Crimes

The complaint centers on violations of Article 197.2 of the Spanish Penal Code, which addresses unauthorized discovery and disclosure of computer secrets. This provision specifically protects privacy rights, personal image, and home inviolability under constitutional Article 18.1.

The alleged criminal conduct includes:

  • Unauthorized remote surveillance of personal devices
  • Illegal access to private communications, family photos, and confidential medical information
  • Violation of informational freedom and habeas data rights protected under European data protection frameworks
  • Breach of fundamental privacy rights guaranteed by Spanish and European law

Plaintiffs:

  • Jordi Baylina Melé
  • Joan Arús San Segundo
  • Pau Escrich Garcia
  • Joan Matamala i Alzina
  • Xavier Vives Riba

Defendants

  • NSO Group (Israeli spyware manufacturer)
  • Saito Tech Ltd. (Candiru) (Israeli spyware manufacturer)
  • Spanish National Intelligence Center (CNI) former officials
  • Guardia Civil former officials, specifically:
    • Félix Vicente Azón Vilas (former Director General, 2018-2020)
    • María Gámez Gámez (former Director General)

Requested Judicial Actions

The complaint requests the court to:

  1. Declassification of Evidence: Request the Council of Ministers to declassify all available documentation regarding the installation of Candiru or Pegasus spyware by any Spanish government authority, agency, or administration
  2. Full Investigation: Conduct a comprehensive investigation into the unauthorized surveillance operations, including administrative decisions and judicial authorizations that enabled the spyware installations
  3. Documentation Disclosure: Obtain all administrative files, investigation costs, and specific budget allocations for these surveillance measures
  4. Accountability: Bring former high-ranking CNI and Guardia Civil officials to trial for their role in the unauthorized surveillance

The legal action emerges from the CatalanGate scandal, which Citizen Lab documented as the most severe case of mercenary spyware abuse forensically verified globally. Former CNI director Paz Esteban admitted behind closed doors to using Pegasus against at least 25 members of Catalan civil society, though Spanish authorities have not clarified Candiru's deployment against the plaintiffs.

Goals

  • Establish legal precedents that hold spyware companies and government oficials liable for human rights violations.
  • Create jurisprudence that protects victims and deters future abuses

Expected Impact

  • Reduced legal impunity for mercenary spyware company executives and government officials who misuse this technology.
  • Establishment of victim compensation mechanisms as deterrent against future abuses
  • Create replicable legal model for other victims worldwide
  • Strengthen protection of fundamental rights in digital contexts

Media Gallery

Initiative image
Initiative image
Initiative image