On 1. 1. Decree No 455/2025 amending Decree No 275/2022 on administrative security and on registers of classified information, as amended, enters into force in 2026. For holders of an entrepreneur’s certificate with access to classified information pursuant to Section 20(1)(a) of Act No 412/2005 on the protection of classified information and on security capacity, as amended (the ‘Act’), or applicants for the issue thereof, this entails the need to revise and possibly amend internal directives (most often: Security Documentation of the Entrepreneur extended, for example, to the Directive on administrative security, etc.), provided that: legal changes have a direct impact on the way in which the protection of classified information in the area of administrative security is implemented by the entrepreneur.

Amendments to the legislation with a direct impact on the manner in which the protection of classified information in the area of administrative security is implemented by an entrepreneur in connection with the above-mentioned amendment to the Decree concern:

  • the scope of the underlying classified material; Reserved on a classified document Reserved and the subsequent handling of these background materials,
  • the possibility of expanding the circle of persons who can be employed in the the Classified Information Registerthe Auxiliary Registry or the Control Point or
  • way sending classified documents from the auxiliary register.

In the case of holders of an entrepreneur’s certificate, this also gives rise to the obligation laid down in Section 68(c) of the Act. With regard to the scope of the changes, the National Security Office informs that it is sufficient for the fulfilment of this obligation if the updated part of the entrepreneur’s security documentation regulating the implementation of administrative security measures is submitted by the entrepreneur in fulfilment of the obligation under Section 68(d) of the Act, i.e. on a date that coincides with the date of issue of the entrepreneur’s certificate and on which the entrepreneur annually notifies in writing changes to the information contained in the entrepreneur’s application under Section 96 of the Act.

An entrepreneur who is an applicant for the issue of an entrepreneur’s certificate with the form of access pursuant to Section 20(1)(a) of the Act is obliged to submit the entrepreneur’s security documentation (directive) in a state corresponding to the current legislation as part of the application or, if the security procedure was initiated before the change of legislation, to revise that part of the security documentation (directive) and deliver it to the National Security Authority in accordance with Section 103(2) of the Act.

The obligation to immediately revise and amend the security documentation of the entrepreneur (the Directive) in accordance with the current legislation also applies to entrepreneurs who have made a declaration of the entrepreneur pursuant to Section 15a of the Act in the form of access to classified information classified at the level of classification reserved pursuant to Section 20(1)(a) of the Act.