Skip to content
BOE-A-2026-8020 ·10 April 2026 ·otro Low impact
Economic Criminal

Convicted cybercriminals face 3-year multirecidivism rule

LO 1/2026 introduces a 3-year period for applying multirecidivism penalties to cybercrime convictions (art. 4), clarifying sanctions without altering the crime's legal basis or classification.

In 1 key point

  1. A three-year period is established for the implementation of the new multi-offense regulation in cybercrimes (art. 4)

How it affects those involved

Convicted individuals involved in cybercrimes must be aware that the new multi-offense regulation comes into force after three years, directly affecting their potential for repeat criminal penalties. Judicial authorities will need to review pending cases to apply the new rule. Lawyers and defenders should assess whether their clients' criminal records meet the updated criteria. The cybersecurity sector may face an increased risk of sanctions due to repeat offences.

Lifecycle

2026-04-10PublishedPublished in the BOE
Official text Based on BOE data (boe.es). Information, not advice.

Does this provision affect you?

The economic criminal team reviews your specific situation.

Talk to the economic criminal team
This analysis is informational only and does not constitute legal advice or create a client-adviser relationship. BM Consulting.
Email
Contact