New cyber law takes effect, tightening security for thousands of Czech institutions and firms

A new cyber security law has come into force in Czechia, significantly expanding obligations to protect data and train employees. It now applies to thousands of entities, including municipalities, energy and waste companies, universities, and hospitals. All must register with the National Cyber and Information Security Agency (NÚKIB) by year’s end, after which they have a year to comply. Firms in the higher-risk category—about a thousand in total—will face stricter rules. NÚKIB will conduct proactive inspections, while smaller organizations must ensure basic protection such as firewalls, antivirus software, and staff training. Non-compliance can result in fines.