Law No. 181 of July 23, 2014 on Cyber Security and Amendments to Related Laws (Cyber Security Law).
Decree No. 316 of December 19, 2014 on security measures, cyber security incidents, reactive measures and on the determination of submission requirements in the field of cyber security (decree on cyber security).
Significant Amendments to the Cyber Security Act:
The amendment to Act No. 181/2014 Coll. on Cyber Security (hereinafter referred to as the "Cyber Security Act") significantly expands its scope. Currently, it places most of the responsibilities on the administrators of important and critical information systems. Newly included in the scope of the ZKB are
A service that depends on communication networks or information systems, the disruption of which could have a significant impact on the security of key societal or economic activities in the areas of energy, transport, banking, financial market infrastructure, healthcare, drinking water supply and distribution, digital infrastructure, chemical industry and public administration.
Internet search engines;
Cloud computing, which provides access to an expandable and customisable repository of computing resources that can be shared.
Provision of an electronic marketplace service that allows online services to be purchased from the seller via a website;
Health sector
What is new is the inclusion of the healthcare sector, which in the current version of the ZKB was only included for healthcare facilities with a capacity of 2,500 acute beds.
Digital infrastructure
Also new is the digital infrastructure of internet search engines, eShop providers and cloud services (except for micro and small enterprises).
Security duty
All listed companies are required to ensure the security of the information systems used to provide the Digital Service or the Basic Service.
Important and critical systems
The amendment to the Decree also includes changes or significant additions to the requirements imposed on existing operators of important and critical information systems.