(1) The Agency shall identify an operator of essential service and an information system of essential
service by decision if they fulfil the sectoral and impact criteria that take into account the
importance of:
a) The services provided in individual sectors as specified in Section 2, letter i) and
b) The impact of a cyber security incident, particularly on:
1. The extent and quality of essential service provision to users dependent on it
2. Economic and societal activities and public safety
3. The mutual dependency of other sectors referred to in Section 2, letter i)
Sectoral and impact criteria for the determination of an operator of essential service and
specifications for determining the importance of an impact of the disruption of an essential service
on the security of social and economic activities shall be set out in an implementing legal
regulation.
(2) If the Agency finds that the public authority or legal or natural person identified as an essential
service operator according to paragraph 1 also provides the concerned service in another Member
State, it shall consult the relevant authority of the concerned Member State on this matter.
(3) Appeal against the decision of the Agency on the identification of an operator of essential service
and an information system of essential service is not admissible.
(4) The Agency verifies if the requirements for determining an operator of essential service and an
information system of essential service are fulfilled at least every 2 years from the issuance of a
decision identifying the operator of essential service and the information system of essential
service.
Section 22b
(1) For the execution of its powers, the Agency is provided with the following referential data from
the basic register of inhabitants according to this Act:
a) Surname
b) First name or names
c) Residence address
d) Date, place and district of birth or date, place and state of birth for an entity born abroad
e) Date, place and district of death; date, place and state where the death occurred for an entity
that died abroad
f)
Nationality or nationalities, if applicable
g) Record of the establishment of a data mailbox and the identifier of a data mailbox, provided
the data mailbox is made accessible.
(2) For the execution of its powers, the Agency is provided with the following data about the state
citizens of the Czech Republic from the agenda information system of the register of inhabitants
according to this Act:
a) First name or names, surname, including previous surnames and surname at birth