A/68/156 • Act No. 11/2002 of 6 May 2002 governing the National Intelligence Centre (CNI), and Royal Decree No. 421/2004 of 12 March 2004, which governs the National Cryptology Centre. By means of these two instruments, the CNI is mandated, among other duties, to coordinate the action of the various Government agencies that use encryption methods and procedures, guarantee the security of information technology in that area and ensure compliance with regulations relating to the protection of classified information. • Act No. 34/2002 of 11 July 2002 on information society services and electronic commerce, which aims to incorporate into Spanish law Directive 2000/31/EC of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, on the internal market (“Directive on electronic commerce”). It also partially incorporates Directive 98/27/EC of the European Parliament and of the Council of 19 May 1998 on injunctions for the protection of consumers’ interests since, in accordance with the provisions of that Directive, it governs injunctions against conduct contravening the provisions of the Act. • General Telecommunications Act No. 32/2003 of 13 November 2003 governing the operation of networks and provision of services in the area of electronic communications. • Act No. 59/2003 of 19 December 2003 on electronic signatures, already mentioned. • Act No. 11/2007 of 22 June 2007 on citizens’ electronic access to public services, which governs communications between citizens and public authorities using electronic, information and telematic techniques and methods. • Organization Act No. 10/2007 of 8 October 2007 governing the police database of DNA identifiers. The Act establishes a single database incorporating all files of the State security and law enforcement agencies containing identifiers obtained from DNA analysis carried out as part of a criminal investigation, cadaver identification procedures or missing persons enquiries. • Act 25/2007 of 18 October 2007 on the preservation of data relating to electronic communications and public communications networks, which is having a positive impact on investigations carried out in this field. • Royal Decree No. 1720/2007 of 21 December 2007 adopting the implementing regulations for Organization Act No. 15/1999 of 13 December 1999 on the protection of personal data. • Act No. 56/2007 of 28 December 2007 on measures to promote the information society. • Criminalization of the following cybercrimes related to the Internet activity of terrorist organizations: – Computer sabotage, article 264 of the Penal Code – Threats, article 169 and following of the Penal Code – Justification or glorification of terrorism, article 578 of the Penal Code 6 13-39735