About Us

Artificial intelligence (hereinafter referred to as “AI”) is a constantly developing trend that is becoming an integral part of modern society, including the work environment. It can be used to automate some work processes, evaluate employees or recruit them. However, its introduction raises a fundamental question: who is responsible for the outputs and decisions of AI that arise when it is used in the work environment? The following article provides a legal perspective on this issue.

On 1 January 2026, the bulk of Act No. 270/2025 Coll., amending Act No. 418/2011 Coll., on the criminal liability of legal entities and proceedings against them (hereinafter referred to as “zTOPO”), entered into force. This amendment strengthens the importance of compliance programs, which have become not only a prevention tool, but also a significant factor influencing criminal liability and its practical consequences for a legal entity.

The new legislation requires not only the implementation of technical security measures, but also the setting of risk management, internal processes, control mechanisms and supply chain security. From a practical point of view, cybersecurity affects the functioning of the entire organization – from management to legal departments, compliance to business departments responsible for supplier selection and contractual settings of supplier relationships.

The new Critical Infrastructure Act fundamentally changes the perspective on supplier relationships: so-called critical suppliers, their identification and screening now play a key role. What obligations does this impose on organizations and how do they impact risk management and everyday practice?