strengthening the protection of information systems or networks and electronic communication
networks1, and an appropriate period of its application for persons specified in Section 3, letters c)
to f).
Section 15
(1) The measure of general nature according to Section 13 or Section 14 shall come into effect at the
moment of its publication on the official notice board of the Agency; the provisions of Section 172
of the Code of Administrative Procedure shall not apply. The Agency shall also inform public
authorities and legal or natural persons specified in Section 3 whose contact details are kept in
the record according to Section 16, paragraph 4 about the issuance of the measure of general
nature.
(2) Comments on the measure of general nature adopted according to Section 13 or 14 can be made
within a period of 30 days from the day it was published on the official notice board of the Agency.
The Agency may change or repeal the measure of general nature in response to the comments.
Section 15a
(1) In the case of an impending cyber security incident and based on the proposal of an information
system operator who has, with no effect, asked the administrator to fulfil their obligation of
transferring to the operator the data, operational data and information they have with regard to
the administration of the information or communication system of a critical information
infrastructure or the administration of an important information system, the Agency may impose
the obligation to transfer the data, operational data and information the administrator has with
regard to the administration of the system to the operator of the system; the proposal must
contain a justification for this request with regard to the threat of an impending cyber security
incident, a detailed description of previous communication between the administrator and the
operator of the system, particularly with regard to the failure to fulfil the contractual obligations
by the administrator, and potential consequences if the data, operational data and information
are not transferred.
(2) The decision to impose the obligation to transfer the data, operational data and information
according to paragraph 1 is the first legal act in the proceedings, is enforceable upon the delivery
of this decision and appeal against such decision does not have a suspensive effect.
(3) The provision in Section 6a, paragraph 4 shall be used similarly for the reimbursement of
efficiently incurred costs for the transmission of data, operational data and information by the
administrator of an information or communication system of a critical information infrastructure,
or the administrator of an important information system according to paragraph 1.
Section 16
Contact details
(1) Contact details mean the following:
a) For a legal person, the trading company or the name, registered office address, identification
number of the person or similar number assigned abroad