+420 266 104 111 (8:00-16:30, Mo-Fr)
Order

We are a municipality or government office—does the new Cybersecurity Act apply to us?

18. 7. 2025

Yes. The new Cybersecurity Act was signed by the president on June 26, 2025, and will take effect on November 1, 2025. It implements the NIS2 Directive and significantly expands the scope of regulated entities.

This means the law will affect thousands of institutions: government offices, public service organizations, hospitals, schools, regional governments, municipalities, and other public bodies.

Once in effect, regulated entities will have 60 days to report their regulated services and will then be required to meet specific obligations—such as:

  • Cyber risk management

  • Systems security

  • Incident response

  • Event reporting

We highly recommend familiarizing yourself with the law’s requirements in advance.
You can find clear and detailed guidance at the NÚKIB portal: Guide to the New Cybersecurity Act | NÚKIB Portal