February 2026 – On Monday, 9
February 2026, the Czech National Cyber and Information Security
Agency (“Czech Cybersecurity Authority”) issued and
dispatched more than 4,800 administrative decisions designating
providers of regulated services pursuant to the newly enacted Czech
Cybersecurity Act. The expected number of regulated entities,
however, exceeds 6,000.
In its press release of 11 February 2026, the Czech
Cybersecurity Authority called on entities that had not yet done so
to submit their notification of regulated services as soon as
possible to avoid potential sanctions.
Background
The new Cybersecurity Act, which transposes the NIS2 Directive
into Czech law, came into effect on 1 November 2025.
