Czech Republic: Act on Cyber Security
The Act on Cyber Security is a law that was passed in the Czech Republic in 2014. The purpose of the law is to protect the country’s information systems from cyber attacks and to ensure that critical infrastructure, such as energy and transport systems, is secure. The law requires public and private entities to implement security measures to protect their networks and systems from cyber threats.
The law establishes a National Cyber and Information Security Agency (NCISA) responsible for monitoring the country’s cyber security and coordinating the response to cyber incidents. The NCISA works with other government agencies and private sector organizations to share information about cyber threats and to develop strategies for addressing them.
The law has been updated several times since it was first passed, most recently in 2020, to reflect changes in the cyber threat landscape and to strengthen the country’s cyber defences. The law has been praised for its comprehensive approach to cyber security and its emphasis on cooperation between the public and private sectors. However, some critics have raised concerns about the law’s potential impact on privacy and free speech, particularly in the context of online content regulation.
PART ONE: Cyber Security
Chapter I – General provisions
1 – Subject of the Act
2 – Basic periods
3 – Liable public authorities and natural and legal persons in the cyber security field
Chapter II – System to ensure cyber security
4 – Security measures
5 – Organisational measures and Technical measures.
6 – Implementing legal regulation
7 – Cyber security event and cyber security incident
8 – Cyber security incident report
9 – Record keeping
10 – Data confidentiality of persons.
11 – Measures
12 – Warning
13 – Reactive and protective measures
14. The NSA
15. Measures of general nature
16 – Contact details
17 – National CERT
18 – Administrator of national CERT
19 – Public-law contract
20 – Governmental CERT
Chapter III – State of cyber emergency
21 – State of cyber emergency meaning and declaration
Chapter IV – State administration performance
22 – State administration in the field of cyber security
Chapter V – Control, supervision and administrative offences
23 – Control
24 – Corrective measures
25 – Administrative offences
26 – Offence
27 – Legal person
Chapter VI – Final provisions
28 – Enabling provisions
29 – Transitional provisions
30 – Public authorities and natural and legal persons set out in § 3 c) and d)
31 – Public authorities and natural and legal persons set out in § 3 e)
32 – The activity of the National CERT
33 – Common provisions
PART TWO: Change of the Act on the Protection of Classified Information and Security Eligibility
34 – Act No. 412/2005 Coll., on Protection of Classified Information and Security Eligibility, as amended
PART THREE: Change of the Electronic Communications Act
35 – Act No. 127/2005 Coll., on Electronic Communications and on Amendment to certain related Acts
PART FOUR: Change of the Act on Freedom of Information
36 – § 11 paragraph 4 of the Act No. 106/1999 Coll., on Freedom of Information, as amended by the Act No. 61/2006
PART FIVE: Change of the Act on Radio and Television Broadcasting
37 – § 32 paragraph 1 k) of the Act No. 231/2001 Coll. on Radio and Television Broadcasting and on Amendment to Other Ac
PART SIX: Entering into force
38 – Act shall enter into force
