The Chamber of Deputies approved the draft law on cyber security, which transposes the European NIS Directive2 into Czech law. If approved, the law will enter into force in the third month after its publication in the Collection of Laws, probably in 2025. From this date, the 60-day period during which companies providing regulated services must report to the National Office for Cyber and Information Security (NUCSIS) begins.
The new law fundamentally changes the rules of the game for hundreds of companies, especially in strategic areas such as energy, transport and healthcare. For example, operators of solar power plants over 100 kW or battery storage facilities will also be affected. The law introduces two regimes of safety obligations – higher and lower – with the NUCIB deciding which regime a company will fall into.The obligations include, among others, cyber risk management, employee training, or the introduction of technical measures.
Ordinary citizens will not be directly affected by the law, but indirectly it may bring them greater protection in areas such as health services or energy supply. The law transfers the decision on the “riskiness” of contractors from the NCIB to the government – which will be able to exclude certain contractors from strategic contracts on the basis of security risk.
We will continue to monitor developments in the legislative process.
Our team of experienced attorneys will help you solve any legal issue. Within 24 hours we’ll evaluate your situation and suggest a step-by-step solution, including all costs. The price for this proposal is only CZK 690, and this is refunded to you when you order service from us.
In person and online. Just choose the appropriate service or opt for an independent consultation when you are unsure.
