The new Czech Cybersecurity Act, which transposes the EU NIS2 directive into Czech law, has been in force since 1 November 2025.
The act brings fundamental changes and new obligations for providers of regulated services.
One of the first obligations is the self-identification of the organisation – finding out whether it falls under the act. Entities covered by it had to register with the National Cyber and Information Security Agency (NÚKIB) within 60 days of the act taking effect. If your organisation only starts meeting the criteria later (for example as headcount or turnover grows, or with a new service), you have 60 days from that moment to register. Anyone who missed the deadline should put it right as soon as possible.
Contact us today and find out whether your organisation is among the entities obliged under the NIS2 directive.
We will be happy to help you with the analysis, implementation and fulfilment of all cybersecurity requirements.
The MindBe Team
