The call responds to  the new Cyber Security Act No. 264/2025 Coll., effective from 1 November 2025, which implements the NIS2 Directive  and introduces new obligations, especially for municipalities with extended powers and other affected entities.

It is essential for applicants to know that  the level of support from the EU is to be 50% of the total eligible expenditure, while the remaining 50% will be covered by the beneficiaries from their own resources. The minimum amount of total eligible expenditure for the project is to be CZK 1 million.

According to the notice, the maximum amount of eligible expenditure will be divided according to the type of applicant and the regime of obligations: CZK 15 million for providers of regulated services in the regime of lower obligations, CZK 20 million for providers in the regime of higher obligations and up to CZK 40 million in the case of an eligible applicant who is a provider of a regulated service pursuant to Section 5 of Act No. 264/2025 Coll.

Announced eligible applicants include, for example, regions, regional directorates of the Police of the Czech Republic, fire rescue services of regions, contributory organizations established by regions or ORP, companies 100% owned by the region or ORP and university hospitals. In the regime of lower obligations, only municipalities with extended powers. Each eligible applicant must also be a registered provider of a regulated service under the Cyber Security Act.

According to the current schedule, the call is expected to be launched on March 30, 2026, and the submission of applications should begin on April 30, 2026. At the same time, IROP points out that these parameters may still be modified as part of the comment procedure.

Recommendations for clients: if the new regulatory obligations apply to you, it is advisable to verify your organisation’s eligibility in advance, prepare a project framework, and take into account the need for 50% co‑financing. However, the final conditions will only be confirmed upon the official launch of the call and the related documentation.