IT and software law, cybersecurity
Law Firm
How to ensure the legal security of data and personal information in the field of cybersecurity?
Our team also provides advice on cyber security, where we focus on the legal aspects of data security and data protection. We help companies implement procedures to ensure compliance with data protection and cybersecurity legislation, including the GDPR and the Cybersecurity Act. In the event of incidents, we ensure a swift and effective response, including resolving disputes related to data leaks or systems security breaches.
The firm's IT law services include:
- Legal advice on software licensing and intellectual property protection
- contractual documentation for software development, implementation and distribution
- representing clients in legal disputes involving software products
- personal data protection and GDPR implementation
- legal support in the implementation and operation of IT systems and applications
Cybersecurity and compliance services:
- Cybersecurity and data protection, including compliance with legislation
- Risk analysis and legal audits in connection with IT projects
- representation before government authorities in the event of a breach of data protection regulations
- legal advice on data protection and cyber security
- professional training and consulting focused on compliance with legislative changes in the field of IT and cybersecurity
We also provide legal analysis of the impact of new legislation in the field of IT law and cybersecurity and offer compliance training.
Selected legal specialists for you
Read our experts' articles
Software as a defective product as of 9 December 2026
A software supplier has a carefully set liability cap in their terms and conditions, relying on it to protect them from heavy damages. As of December 9, 2026, under a European directive that the Czech Republic must implement by then, new rules will apply to new products, including software, which exclude contractual limitations of liability towards an injured person. Lawyers from the Prague-based ARROWS law firm will structure your contracts to withstand these changes.
Critical infrastructure, or NIS2?
A company hears about critical infrastructure and about NIS2 and is unsure which regime applies. In fact these are two separate laws, and both can apply to the same company at once. The lawyers of ARROWS advokátní kancelář walk management through a simple test that shows where each service falls, and set out what to do before the authority comes knocking.<br><br>
Are you commissioning custom software or SaaS?
With software, the costliest mistakes are not made at signature but at exit. Who holds the source code, who is able to take the system over and what happens to the data are questions that usually surface once the relationship is already strained. This article sets out how to secure both the deliverable and the way out before you sign.
AML Compliance for E‑Shops Selling Luxury Goods and Investment Gold
If your e-shop sells jewellery, watches or investment gold and accepts cash payments of EUR 10,000 or more, it automatically becomes an obliged entity under anti-money-laundering law, with duties to identify customers and report suspicious deals. Find out how to set up AML processes without risking fines.
Cybersecurity and Critical Infrastructure
From 2026, the amendment to the Czech Act on Cybersecurity (transposing the NIS2 Directive) will introduce an obligation to report a cybersecurity incident within 24 hours and expand the personal liability of management for insufficient security – both the company and a specific manager may face a separate fine. Find out which companies the new rules affect and how to prepare for them.
When Quiz Apps Become Gambling
If your quiz or competition app combines an entry fee, an uncertain payout, and a prize draw, it may count as a licensed gambling game under Ministry of Finance rules. Running it without a licence can mean a hefty fine and having the site blocked. Find out which features trigger the gambling definition and how to set up the app safely.
Who Owns AI-Generated Code?
Code that AI generates from a single plain prompt without further editing carries no copyright protection because it lacks genuine human creative input, meaning anyone can use it freely. Find out what counts as sufficient creative work and why, without a written contractor agreement, the code belongs to the developer, not to you.
Legal Checklist for SaaS Platforms in the EU
A SaaS platform operating in the EU must comply with GDPR, the AI Act, and copyright law all at once, and breaching any one of them can bring sanctions running into tens of millions of euros. Processing personal data also isn't a legally neutral step: without a valid legal basis, the processing is unlawful regardless of whether any data actually leaks. We explain what your terms of service and AI-output licensing terms need to cover to close off these risks.
Using Artificial Intelligence in Software and App Development – Legal Questions
Using artificial intelligence in software development can accelerate delivery but also create disputes over code ownership, liability for defects and the disclosure of confidential data. Development companies should review AI tool licences, rules for entering data and contractual responsibilities to clients. The article explains how to establish output reviews, documentation and internal safeguards that protect the product and its commercial use.
Thanks to our clients
since 2015 we have been recognised in the Law Firm of the Year, Law Offices of the Year and Legal500 categories.
Join the clients who trust us
We are trusted by e.g. the Czech Ice Hockey Association, MONETA Money Bank and dozens of real estate agencies.