Check in 60 seconds whether NIS2 applies to you

NIS2 compliance in Czechia — clarity in three minutes

NIS2 documents for 23 countries — based on each country's own law

Start the test — enter your details

The result with reasoning is shown immediately after answering. We use your details only for providing the NIS2 service.

Ask the NIS2 assistant A free expert assistant answers your questions about the Directive and zákon č. 264/2025 Sb..

Take the free gap assessment 20 questions on the Article 21(2) measures — see instantly where the gaps are.

Free surface scan — your domain's security picture in one minute

Preview of the sample package's first pageView sample Free sample package before you decide

23countries
21languages
5documents
3 400 EURpackage

Straight from the law

§ 4 Podmínky pro registraci regulované služby (1) Podmínky jsou splněny, jde-li o službu významnou v některém z odvětví: 1. veřejná správa, 2. energetika, 3. výrobní průmysl, 4. potravinářský průmysl, 5. chemický průmysl, 6. vodní hospodářství, 7. odpadové hospodářství, 8. doprava, 9. digitální infrastruktura a služby, 10. finanční trh, 11. zdravotnictví, 12. věda, výzkum a vzdělávání, 13. poštovní a kurýrní služby, 14. obranný průmysl, 15. vesmírný průmysl; a poskytovatel je středním nebo velkým podnikem ve smyslu doporučení Komise 2003/361/ES.

zákon 264/2025 Sb. § 4

The text is from the country's official, enacted law — verbatim, not paraphrased.

Competent authority

Příslušný úřad a ohlašovací povinnost (Úřad/NÚKIB, Národní CERT — zákon 264/2025 Sb. § 42, § 43, § 16)

zákon 264/2025 Sb. § 16

The authority's details are from the country's official, enacted law: https://e-sbirka.gov.cz/sb/2025/264

Data on an EU serverAll processing happens on a server located in the European Union — nothing leaves it.
GDPR by designConsent, the right to erasure and data minimisation are built in from the start.

What is NIS2 and who does it affect in Czechia?

NIS2 is the European Union cybersecurity directive (EU) 2022/2555, transposed in Czechia by the Zákon o kybernetické bezpečnosti (zákon č. 264/2025 Sb.). It significantly widens the scope of obligations: energy, transport, healthcare, digital infrastructure, manufacturing, food industry and many other sectors must implement risk management measures and report incidents to the Národní úřad pro kybernetickou a informační bezpečnost (NÚKIB) — ústřední správní úřad pro oblast kybernetické bezpečnosti (zákon č. 264/2025 Sb. § 42; v zákoně označen jako „Úřad“). Národní CERT je kontaktním místem pro poskytovatele v režimu nižších povinností (§ 43) (Národní úřad pro kybernetickou a informační bezpečnost (NÚKIB)).

The deadlines are strict: a significant incident requires an early warning within 24 hours, a full notification within 72 hours and a final report within one month. Non-compliance can cost an essential entity up to 10 million euros or 2% of worldwide turnover, and an important entity up to 7 million euros or 1.4%.

Our portal turns NIS2 requirements into practice: the free scoping test shows whether NIS2 applies to your company, and the document package is generated automatically, grounded in the officially applicable law text for your country. Start with the test — it takes three minutes.

NIS2 transposition status by EU country →

NIS2 incident reporting deadlines by EU country →

NIS2 risk-management measures vs ISO 27001, DORA and GDPR →

NIS2 administrative fines by country →

NIS2 management body training obligation by country →

The results are an indicative assessment, not legal advice. Your company remains responsible for the final content of any document.