Cyberattack or Data Breach? We Can Help You Handle the Incident

Cyberattacks are on the rise. In recent weeks, even major Czech universities have faced attacks, and in one case personal data was leaked.

But it is not only universities and other higher education institutions. Targets can include healthcare facilities and medical practices, software developers and IT companies, e-shops, banks and other financial institutions, accounting firms, municipalities and public authorities, and manufacturers – in short, anyone who works with data about customers, patients, or employees. And when it happens, every hour counts. A personal data breach generally has to be reported to the Czech Office for Personal Data Protection (ÚOOÚ) within 72 hours, and entities regulated under the Czech Cybersecurity Act must submit an initial report to the National Cyber and Information Security Agency (NÚKIB) within 24 hours at the latest.

How we can help

• how to respond to the incident and what immediate steps to take,
• what information to gather and how to properly document everything,
• who to report the incident to, when, and how (NÚKIB, the ÚOOÚ, and for financial institutions the CNB under the DORA Regulation),
• when and how to inform affected individuals and customers,
• criminal complaints and communication with the Czech Police,
• claims against IT service providers if they are at fault for the incident,
• what follow-up measures to take so that the incident does not happen again.

We provide full support, from the initial response through dealings with the authorities to closing the incident and setting up prevention. We have long focused on cybersecurity and data protection, and on the technical side of an incident we work with IT specialists.

You can find more about our services on the IT/ICT Law and Cybersecurity and GDPR - General Data Protection Regulation pages.

Dealing with an incident right now? Contact us immediately at info@stuchlikova.com or +420 222 767 393 while the reporting deadlines are still running.