The hard part is proving it in court.
In the quiet architecture of financial markets, where information is power and timing is everything, Spain's securities regulator has been constructing a surveillance apparatus capable of watching millions of trades each day for signs of betrayal. The 2025 enforcement record of the CNMV — €19.4 million in fines, including penalties against a celebrated footballer and a prominent businessman for trading on secrets about a corporate takeover — reveals not merely a crackdown, but a maturing institutional conscience about the fairness that markets require to function. The deeper question, as legal observers note, is not whether wrongdoing can be seen, but whether it can be proven — a distinction that separates detection from justice.
- Two high-profile figures, Gerard Piqué and José Elías, were fined for buying Atrys Health shares ahead of a public takeover announcement they had no right to act upon, bringing rare public attention to a system that usually operates in silence.
- Spain's CNMV processed over 70 million daily trade records in 2025 and received 218 suspicious transaction alerts, deploying AI-enhanced surveillance across equities, bonds, and derivatives to catch patterns that human eyes would miss.
- Despite the technological sophistication, enforcement remains the critical bottleneck — investigators must not only identify anomalies but legally establish that a trader possessed privileged information and acted on it, a burden of proof that frequently outlasts the evidence.
- European regulatory frameworks have grown considerably more assertive, yet analysts observe they still lack the criminal prosecution tools, whistleblower incentives, and settlement leverage that give American regulators their sharper edge.
Spain's financial regulator, the CNMV, has spent years assembling one of Europe's most advanced systems for detecting market abuse — and in 2025, that machinery produced visible results. Former footballer Gerard Piqué was fined €200,000 and businessman José Elías €100,000 for trading on non-public information about an impending takeover of Atrys Health. These cases were part of a broader enforcement year that saw €19.4 million in penalties across 71 separate sanctions.
The legal framework underpinning this work dates to 2016, when Spain adopted EU Regulation 596/2014. Under its terms, publicly traded companies must maintain real-time registries of everyone with access to material non-public information, and any market-moving news must be disclosed to the CNMV immediately. In 2025, the regulator received more than 5,700 such disclosures. Corporate insiders face mandatory blackout periods before earnings announcements — a rule that has caught even former minister Josep Borrell, fined €30,000 for selling shares in Abengoa while serving on its board.
The surveillance infrastructure runs on an enormous volume of data. Over 70 million trade records flowed through the system daily in 2025 — a 35 percent increase from the prior year — supplemented by hundreds of millions of records exchanged with regulators across the EU. The CNMV's proprietary alert system applies automated triggers, manual review, and artificial intelligence across multiple asset classes, though the precise parameters it uses remain confidential. When the system flags a concern, the Secondary Markets department opens a file; if irregularities deepen, the Market Surveillance Unit takes over and prepares formal enforcement proceedings.
Yet the most experienced market analysts are careful to distinguish between detection and conviction. Identifying a suspicious trade is one thing; proving in court that the trader possessed privileged information and acted on it — with no plausible innocent explanation — is another matter entirely. This legal burden remains the true test of any enforcement regime. Spain's framework is considered solid, but observers note it still lacks the criminal prosecution pathways, whistleblower incentives, and settlement mechanisms that give American regulators their comparative advantage.
Spain's financial watchdog has been quietly building one of Europe's most sophisticated systems for catching people who trade on secrets. Last week, two high-profile cases brought that machinery into public view: Gerard Piqué, the former footballer, received a €200,000 fine, and businessman José Elías was hit with €100,000, both for trading on non-public information about an impending takeover of Atrys Health. These were not anomalies. In 2025 alone, Spain's National Securities Commission—the CNMV—imposed €19.4 million in fines across 71 separate penalties for market abuse, the bulk of it tied to insider trading.
The rules governing this territory are surprisingly detailed. Since 2016, Spanish markets have operated under EU Regulation 596/2014, a framework that financial analysts describe as reasonably robust. Every company trading publicly must maintain a real-time registry of everyone with access to material non-public information. Any news that could move a stock price must be disclosed to the CNMV immediately—unless the company can prove it won't confuse investors and can guarantee confidentiality. In 2025, the regulator received more than 5,700 such disclosures, a 7.3 percent increase from the year before. Corporate executives and board members face blackout periods, typically thirty days before earnings announcements, when they cannot trade at all. Even former minister Josep Borrell was fined €30,000 for selling a small stake in Abengoa while serving as a board member.
But the real enforcement machinery runs deeper. Every broker, exchange, and trading firm operating in Spain must watch for suspicious activity and report it to the CNMV through a system called STOR—Suspicious Transaction and Order Report. These are not accusations; they are alerts, flags raised when intermediaries detect reasonable grounds for concern. Last year, the regulator received 218 such notifications. Three out of four pointed to potential insider trading. The number was down 21 percent from the previous year and marked the lowest count in five years, though more than half came from financial institutions themselves, with another batch originating from regulators in other EU member states.
The CNMV's detection apparatus draws from multiple streams of data. The primary feed is the daily torrent of trade records—over 70 million in 2025, a 35 percent jump from 2024. These flow not only to Madrid but are shared with regulators across Europe; the CNMV received more than 245 million records from foreign authorities and sent 39 million of its own in return. The regulator also taps into FIRDS, the EU's central database of financial instruments, and maintains its own classification system for securities, which expanded by 25 percent last year, particularly in options and collective investment funds. On top of this sits the CNMV's proprietary alert system, which processes information across equities, bonds, and derivatives using automated triggers, manual review, and artificial intelligence. The parameters it uses are not public.
When the system flags something, the investigation begins in the Secondary Markets department, which oversees listed companies. If irregularities emerge, a formal case file opens. The Market Surveillance Unit then takes over, conducting the actual investigation and preparing sanctions proceedings. In 2025, the CNMV opened 36 investigations, closed 15 of them, and initiated nine formal enforcement actions against 19 individuals or entities. The process is governed by law. There are set timelines, a hearing phase where the accused can respond, and a contentious services department that manages the procedural stage.
The hardest part, according to market analysts, is not spotting the anomaly—a sudden spike in trading before a merger announcement, unusual volume in a particular stock ahead of earnings. The hard part is proving it in court. You must establish that privileged information existed, that the trader had access to it, that a causal connection runs between the two, and that no legitimate explanation accounts for the trade. This is why enforcement remains the bottleneck. European supervision has grown considerably more aggressive in recent years, analysts note, though it still operates differently from the American model, where the SEC benefits from higher trading volumes, criminal prosecution, whistleblower programs, and settlements that carry more weight. Spain's framework is solid, but the real test lies not in detection but in the legal burden of proof.
Citações Notáveis
The difficulty is not in detecting anomalous movements or identifying suspicious patterns, but in legally proving the abuse.— Antonio Castelo, market analyst
Spain has a reasonably good framework to prevent insider trading, even with sophisticated detail, reaching operations of relatively small amounts.— Javier Santacruz, financial analyst
A Conversa do Hearth Outra perspectiva sobre a história
Why does it matter that Piqué and Elías got caught? They're just two people.
They're not really the point. What matters is that the CNMV caught them at all. For years, insider trading in Spain was treated as something that happened to other countries. These cases show the system is actually working.
How does the CNMV even know when someone is trading on secrets?
It doesn't always. That's the problem. The regulator gets 70 million trade records a day, plus alerts from brokers, plus data from other European regulators. The AI looks for patterns—unusual timing, unusual volume, unusual people. But a pattern is just a suspicion.
So they catch people by accident?
Not accident. By design. The system is built to flag anomalies. But then someone has to prove the anomaly was actually a crime. That's where most cases fall apart.
Why is that so hard?
Because you need to show three things: the information existed, the person had it, and they used it. You can't just show they traded before good news came out. You have to prove they knew the good news was coming. That requires evidence—emails, conversations, access logs.
Is Spain better or worse at this than other countries?
Different. The Americans have more resources and more aggressive penalties. But Europe has been catching up. Spain's framework is actually quite detailed. The real difference is in how hard you're willing to push.
What happens if you're caught?
You get fined. Sometimes a lot. Piqué paid 200,000 euros. But there's no prison time in these cases, at least not yet. The CNMV publishes every fine in the official gazette, and it stays on record for five years. That's its own kind of punishment.