Spain’s Wiretap Scandal: Did the Government Just Hand Over Surveillance to Huawei?

Espionage or Efficiency? Spain’s \$14 Million Contract with Huawei Raises Alarms

In a move that has ignited a storm of controversy, the Spanish Ministry of the Interior has awarded €12.3 million (approximately \$14.3 million) in contracts for the storage and management of judicially authorized wiretaps to none other than Huawei — the Chinese tech giant repeatedly flagged by the West for national security concerns. From 2021 to 2025, Huawei’s OceanStor 6800 V5 servers will be used by Spanish law enforcement and intelligence services to classify and store intercepted communications. These systems operate within the frameworks of Spain’s National Security Framework and guidelines from the National Cryptologic Center (CCN-STIC).

What’s raising eyebrows is not just the deal itself — part of routine state procurement — but the persistent involvement of Huawei in sensitive surveillance infrastructure, despite widespread warnings from EU and U.S. agencies. Huawei already powers components of SITEL, Spain’s legal wiretapping system, further deepening its entrenchment in the nation’s security matrix.

According to The Objective, internal voices within Spain’s National Police and Civil Guard are expressing grave concern over what they call a “strategic inconsistency.” They argue that while Spanish officials exhibit caution toward other foreign technologies, they simultaneously rely on a company widely seen as linked to the Chinese Communist Party (CCP).

Prime Minister Pedro Sánchez’s administration, however, has maintained a pro-Huawei stance, often in opposition to broader EU efforts to restrict the company’s participation in 5G infrastructure development. Huawei’s growing footprint in Spain — with local R\&D centers and public contracts — appears to reflect a preference for cost-effective solutions over geopolitical caution.

Huawei’s OceanStor, widely adopted in Africa, Latin America, and Eastern Europe, has become the cheaper alternative to Western options. However, it lacks formal certification from Spain’s own intelligence agency (CNI), leaving a gap in assurance that many argue is too risky in today’s cybersecurity climate.

Huawei has consistently denied all allegations of espionage and claims it does not access or tamper with stored data. Yet, the dissonance between Spain’s trust in the Chinese firm and the cautionary policies of its allies — including the U.S., UK, Australia, Japan, Romania, and New Zealand, which have blocked Huawei from participating in 5G networks — is casting a long shadow over Spain’s national security decisions.

The EU Commission, in January 2020, had advised member states to limit “high-risk” vendors from core parts of 5G networks — a not-so-subtle reference to Huawei. Meanwhile, the U.S. Federal Communications Commission (FCC) banned subsidies for Huawei and ZTE, citing fears of cyber-espionage due to their strong ties to Beijing. The FCC estimated that removing Chinese tech from U.S. infrastructure would cost \$1.837 billion — a price they were willing to pay for perceived safety.

Despite this global chorus of warnings, Spain appears to be swimming upstream.

💬 What Undercode Say:

Spain’s decision to entrust Huawei with the storage of sensitive wiretap data is not merely a technological procurement — it is a geopolitical gamble. While cost-saving and efficiency are valid administrative goals, they cannot outweigh national sovereignty and digital autonomy. In today’s digital age, data is power, and handing over the reins to a firm under intense international scrutiny for potential espionage risks calls into question the prudence of Spain’s cybersecurity strategy.

What makes this situation more perplexing is the lack of certification from Spain’s own intelligence agency, CNI. Even if the OceanStor system meets technical benchmarks, the absence of national vetting is a red flag. In the cybersecurity world, trust is not assumed — it is verified. Without CNI’s endorsement, the government’s reliance on Huawei seems more politically driven than risk-assessed.

Furthermore, Prime Minister Sánchez’s open support of Huawei, even as Brussels urges caution, creates a fracture in EU digital policy unity. Spain’s divergence may not only weaken collective cybersecurity defenses but also embolden state-linked foreign tech players to further infiltrate sensitive sectors across the continent.

From a law enforcement perspective, the unease expressed by the National Police and Civil Guard is understandable. They are the first to face the consequences if surveillance infrastructure is compromised. If Huawei’s servers were to be accessed or manipulated covertly, it could result in national security breaches, exposure of confidential investigations, or manipulation of judicially authorized intercepts.

Huawei, of course, maintains its innocence. But its track record — including warnings from the UK’s GCHQ, Czech cybersecurity agencies, and full bans from the U.S. — tells a different story. The global pattern suggests that Huawei is more than just a tech provider; it’s a geopolitical actor, capable of influencing surveillance, infrastructure, and ultimately, state power.

By diverging from its allies, Spain may have gained some short-term savings, but at what long-term cost? Trust in technology infrastructure is paramount, especially when it’s linked to core state surveillance systems.

The decision to embed Huawei into Spain’s wiretap ecosystem seems less like a neutral procurement choice and more like a strategic miscalculation — one that might come back to haunt Madrid if geopolitical tensions escalate further.

🔍 Fact Checker Results:

✅ Huawei’s OceanStor system is indeed used in Spain’s SITEL wiretap infrastructure
✅ The EU and U.S. have both issued formal warnings about Huawei’s involvement in critical infrastructure
❌ Huawei is not certified by Spain’s CNI, despite being entrusted with sensitive judicial intercept data

📊 Prediction:

If geopolitical tensions between China and the West continue to rise, Spain may be forced to unwind its contracts with Huawei, either through internal political pressure or external EU mandates. The cost of reversing this decision — financially and reputationally — could be substantial. Expect future calls for greater cybersecurity transparency and more stringent vendor vetting protocols across Spain’s public sector.

Spain is at a crossroads. Will it continue down a path of digital pragmatism at the expense of alliance unity and internal trust, or will it recalibrate its cybersecurity compass in line with global democratic peers? The clock is ticking.