The new Cybersecurity Act (Act No. 264/2025 Coll.), which implements the NIS2 Directive, entered into force on 1 November 2025.
At the same time, its implementing regulations also came into effect, in particular the following decrees issued by the National Cyber and Information Security Agency (NÚKIB):
- · Decree No. 334/2025 Coll. on the Portal of the National Cyber and Information Security Agency and requirements for certain procedures,
- · Decree No. 408/2025 Coll. on regulated services,
- · Decree No. 409/2025 Coll. on security measures for providers of regulated services under the higher obligations regime,
- · Decree No. 410/2025 Coll. on security measures for providers of regulated services under the lower obligations regime.
Providers of regulated services were required to notify the relevant regulated services by 31 December 2025.
Digital Legal Update 01/2026 here.