NÚKIB warns companies of high fines over cybersecurity compliance

The National Cyber and Information Security Agency (NÚKIB) has begun actively contacting over 4,400 companies and organizations subject to the new cybersecurity law. Experts warn that many firms are currently only meeting formal obligations rather than implementing substantive security improvements.

Under the new legislation, which took effect on November 1, 2025, organizations have a 60-day window to report regulated services. For many, this deadline has already passed, leaving them in non-compliance. Failure to register can result in significant fines of up to 250 million CZK or 2% of total annual global turnover.

To support these transitions, the CYLANCES platform has been launched as part of the DIGITAL Europe program. This online space is designed for professionals to share practical experiences, discuss regulatory requirements such as NIS2, and access educational materials to strengthen digital resilience and cooperation between the public and private sectors in the Czech Republic.