Czech Republic. Comprehensive data protection. Act
Act 110/2019Act No. 110/2019 Coll. on the Processing of Personal Data (zákon o zpracování osobních údajů)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Czechia's Act 110/2019 adapts the GDPR nationally, transposes the Law Enforcement Directive and sets rules for journalism, academia and public bodies. It sets a national age of consent.
- Key themes
- Unique features
Age of digital consent (GDPR Art 8): 15. Public authorities cannot be fined; simplified information obligations where processing is required by law; journalistic and artistic exemptions are broad.
- SaaS relevance
Applies alongside the GDPR to any SaaS provider established in, or targeting users in, this country; national rules on age of consent, employee data and offences shape onboarding and HR-related features.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- Authority 72h; individuals without undue delay (GDPR Arts 33-34)
- DPO
- Conditional
- Cross-border transfers
- GDPR Chapter V (adequacy/SCCs/BCRs)
- Maximum penalty
- GDPR Art 83: €20m or 4% global turnover; no fines on public bodies
§3Dates
- Key dates
- Adopted
- In force
- Replaced Act 101/2000 Coll.
§4Text and authority
- Text
- Authoritative text e-sbirka.cz
- English text uoou.gov.cz
- Authority
- Úřad pro ochranu osobních údajů (ÚOOÚ)
§5Where it applies
- Domestic law of
- Czech Republic
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.