The new Critical Infrastructure Act (Act No. 266/2025 Coll.) entered into force on 19 August 2025. The Act transposes the Directive on the resilience of critical entities (CER Directive) and introduces substantial changes compared to the previous regulation under the Crisis Management Act.
Essential service providers are required to comply with the reporting duty under the new Act no later than 1 March 2026.
The main changes include a new definition of critical infrastructure through essential services and their providers and new obligations for critical infrastructure entities. In addition, a system of sanctions for non-compliance has been introduced.
In practice, this means that essential service providers must internally assess whether they meet the criteria set out in the implementing regulation and prepare for possible inclusion in the list of critical infrastructure entities with all related obligations.
More information is available in our overview – for more information, click on the image below.
9. 9. 2025