meta_id 3288602

On July 1, 2026, the Czech Republic's Ministry of Industry and Commerce submitted a draft law establishing cybersecurity requirements for products with digital elements. The proposal aims to transpose the European Union's Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for digital products, adopted on October 23, 2024, into Czech law. This regulation, known as the Cyber Resilience Act, establishes baseline security standards for digital products across the EU market. The draft law defines institutional arrangements for supervising the security of digital products and designates a notifying body responsible for managing compliance procedures. It establishes obligations for notified conformity assessment bodies and sets out procedures for reporting on digital product security. The legislation also specifies administrative offences and penalty amounts for breaches of cybersecurity obligations by economic operators and notified conformity assessment bodies. The proposal covers consumer protection and free movement of goods within the internal market. The draft law is currently in the comment procedure stage of the legislative process, as recorded on the oDOK Portal (the Czech government's legislative documentation system). The material was authorised on July 1, 2026, with reference number MPO 75553/26/31800/01000. Supporting documentation, including the legislative justification, impact assessment, and draft resolution, has been published on the oDOK Portal. The legislative process will continue through subsequent stages, including government approval and parliamentary consideration, before the law can be enacted. REFERENCES: oDOK Portal – Návrh zákona o požadavcích na kybernetickou bezpečnost výrobků s digitálními prvky a o změně některých souvisejících zákonů: https://odok.vlada.cz/