Blog

cybersecurity

Cyber Resilience Act (CRA)_povinnosti výrobců softwaru a hardwaru

8. 7. 2026 | Jiří Hradský

Cyber Resilience Act (CRA): obligations for software and hardware manufacturers

Do you develop software or manufacture devices that connect to the internet? Then the Cyber Resilience Act (CRA) very likely applies to you – Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements. The first hard obligation kicks in as early as 11 September 2026: reporting of actively exploited vulnerabilities. And watch out – it also covers products that are already on the market. Breaches carry fines of up to EUR 15,000,000 or 2.5 % of worldwide turnover. In this article we summarise who the CRA applies to, what obligations it introduces, what the Czech adaptation act addresses, and how to prepare.

I am interested in →

2. 7. 2026 | Pavel Čech

The AI Act is changing: what the Digital Omnibus brings and the delay to obligations

Do you use artificial intelligence in your company, or even develop your own AI product? Then you probably marked 2 August 2026 in your calendar – the day a large part of the obligations under the AI Act (Regulation (EU) 2024/1689) was due to apply in full. Write it in pencil, not pen. On 29 June 2026 the Council of the EU gave final approval to the so-called Digital Omnibus, which postpones key obligations, softens some rules and at the same time adds new prohibitions.

I am interested in →

software law

Vibecoding v praxi_Kdo odpovídá za kód a bezpečnost

23. 6. 2026 | Pavel Čech, Simona Hodovská

Vibecoding in Practice: Who Is Responsible for the Code and Security?

Vibecoding promised that anyone could write code. At our event “Vibecoding Without Consequences”, however, we also showed the flip side: what happens when the app you clicked together exposes a user database or learns the lyrics of someone else’s songs. We summarize two talks from SEDLAKOVA LEGAL that demonstrated one thing – “the AI wrote it” is not a legal excuse.

I am interested in →

Označování AI obsahu_nová pravidla pro rok 2026

18. 6. 2026 | Pavel Čech

Labelling AI Content: New Rules for 2026

Do you use generative AI in your company? Do you create texts, images, videos with it, or operate a chatbot? Then from 2 August 2026 a new obligation applies to you: the labelling of AI content under Article 50 of the AI Act – Regulation (EU) 2024/1689 on artificial intelligence. And on 10 June 2026 the European Commission published the final Code of Practice, which shows how to do it in practice.

In this article we summarize what exactly you must label, when the obligations start to apply, what sanctions you face – and what you can do right now.

I am interested in →

software law

Data Act a SaaS smlouvy_Praktický průvodce pro poskytovatele v roce 2026

30. 4. 2026 | Pavel Čech

Data Act a SaaS smlouvy: Co změnit ve VOP v roce 2026 | SEDLAKOVA LEGAL

The Data Act (Regulation (EU) 2023/2854) changes the rules from September 2025 for everyone who operates SaaS in the EU. A customer can terminate the contract with you with a two-month notice period, request a free export of data and leave for the competition. Your terms of business and contractual documentation most likely do not meet the new requirements. In this article we will show you what is changing and how to prepare.

I am interested in →

e-shops

Tlačítko pro odstoupení od smlouvy_Co čeká e-shopy v 2026

15. 4. 2026 | Jiří Hradský

Withdrawal-from-Contract Button: What Awaits E-shops in 2026

Every e-shop operator that sells to consumers is likely to face a new obligation as early as summer 2026: placing a functional button for withdrawal from a contract directly into its online interface. The penalty for failing to do so can reach up to CZK 5,000,000. And no, having a PDF form somewhere in the footer is not enough.

I am interested in →

Load more ↓