Transitional provisions of amendments: Article IV of Act No. 104/2017 Coll. Version effective from July 1, 2017 An administrator of an information or communication system of a critical information infrastructure, or an administrator of an important information system specified in Act No. 181/2014 Coll. in the version effective before this Act comes into effect shall: a) Send a notification of contact details according to Section 16 of Act No. 181/2014 Coll., no later than within 30 days of the effective date of this Act b) Start fulfilling the obligation specified in Section 8, paragraphs 1 and 3 of Act No. 181/2014 Coll., no later than within 6 months from the effective date of this Act c) Introduce security measures according to Section 4, paragraph 2 of Act No. 181/2014 Coll, no later than within 6 months from the effective date of this Act. In case security measures are introduced, the administrator is entitled to reimbursement of the costs related to the implementation of the security measure; the cost of the administrator shall be reimbursed by the operator of the concerned system Article IV of Act No. 205/2017 Coll. Version effective from August 1, 2017 1. The Agency shall identify the operators of essential service and information systems of essential service according to Section 22a, paragraph 1 of Act No. 181/2014 Coll. In line with the wording of the version effective from the effective date of this Act to November 9, 2018. 2. Public authorities and legal or natural persons specified in Section 3, letter f) of Act No. 181/2014 Coll. in the version effective from the effective date of this Act shall: a) Send a notification to the Agency with contact details according to Section 16, paragraph 1 of Act No. 181/2014 Coll. in the version effective on the date this Act comes into effect, within 30 days of the date on which they were informed according to Section 4a, paragraph 3 of Act No. 181/2014 Coll. in the version effective on the date this Act comes into effect b) Start fulfilling their other obligations according to Act No. 181/2014 Coll. in the version effective on the date this Act comes into effect, within 1 year from the date on which they were informed according to Section 4a, paragraph 3 of Act No. 181/2014 Coll., in the version effective on the date this Act comes into effect 3. The digital service provider shall: a) Send a notification to the Agency with contact details according to Section 16, paragraph 1 of Act No. 181/2014 Coll. in the version effective on the date this Act comes into effect, within 30 days of the effective date of this Act b) Start fulfilling their other obligations arising from Act No. 181/2014 Coll. in the version effective from the date this Act comes into effect, within 1 year from the effective date of this Act 4. If the conditions of the contractual relations concluded with the supplier of their information or communication system do not comply with the requirements of Act No. 181/2014 Coll. in the

Select target paragraph3