UNE 19601

Strengthen your Criminal Compliance in Spain

Design, implement, and monitor a UNE 19601-aligned criminal compliance program to prevent offences and demonstrate due control.

UNE 19601 – Achieve Spanish certification faster

Article 31bis of the Spanish Criminal Code – Protect your organization from criminal liability in Spain

Frequently Asked Questions

Everything you need to know about criminal compliance in Spain

UNE 19601 & Spanish Criminal Code

UNE 19601 is the Spanish standard that sets requirements for criminal compliance management systems. It provides a framework to prevent criminal offences and demonstrate due control, helping organizations reduce liability under the Spanish Criminal Code.

UNE 19601 covers a wide range of criminal risks including corruption, fraud, money laundering, tax offences, environmental crimes, workplace safety violations, and data protection breaches. Each risk must be mapped and linked to specific controls.

Naltilia maps your criminal risks and links each to specific controls: policies, procedures, approvals, segregation of duties, financial controls, whistleblowing, and investigations. You maintain a live view of your compliance level by process, business unit, or subsidiary.

Continuous Improvement & Monitoring

UNE 19601 requires organizations to demonstrate that their compliance model is not static but actively managed. Continuous improvement shows prosecutors and regulators that you take crime prevention seriously and adapt to new risks.

Naltilia helps plan and monitor effectiveness tests of key controls including training, approvals, checks, and audits. You can track training coverage and understanding for high-risk roles and third parties.

Naltilia generates dashboards and reports for governing bodies, supervisory authorities, and certification audits. All updates following incidents, regulatory changes, or audit findings are documented automatically.

Legal Defense & Certification

A well-documented UNE 19601 compliance program can serve as a defense in criminal proceedings by demonstrating that the organization exercised due control. Clear traceability of decisions, investigations, and corrective measures reinforces this defense.

Naltilia maintains comprehensive evidence including structured risk assessments, gap analyses, control implementations, training records, incident management, and continuous improvement documentation—all organized for certification reviews.