What penalties apply for violating regular obligations to the CNB?

For any foreign company operating in the Czech Republic, understanding your obligations to the Czech National Bank (CNB) is not just a matter of administrative compliance—it is fundamental to your operational success and financial security. This guide provides clear answers on CNB reporting duties, the severe penalties for non-compliance, and how to avoid them.

Need advice on this topic? Contact the ARROWS law firm by email office@arws.cz or phone +420 245 007 740. Your question will be answered by "Mgr. Jáchym Petřík", an expert on the subject.

The CNB's watchful eye: Why foreign companies must prioritize compliance

The Czech National Bank is far more than a passive regulator. Its core mandate is to maintain the stability and integrity of the entire Czech financial system. This objective drives a supervisory philosophy that is both proactive and holistic. From the CNB's perspective, a compliance failure at a single firm—even a foreign branch or subsidiary—is not viewed as an isolated administrative error. Instead, it is assessed through the lens of systemic risk, as a potential threat to the integrity of the entire market.

This approach has profound implications for foreign companies. A "check-the-box" attitude toward compliance is dangerously insufficient. The CNB supervises a firm's obligations as a single, integrated system where continuous reporting, adherence to strict prudential rules, and a robust internal governance framework are deeply interconnected. An error in one area, such as a late data submission, will almost certainly trigger a deeper inquiry into the internal controls and governance structures that allowed the mistake to happen.

For executives and in-house counsel accustomed to more reactive regulators in other jurisdictions, it is critical to understand this fundamental difference. The Czech regulatory environment demands a proactive, comprehensive, and integrated compliance strategy from the very first day of operation. Failing to appreciate this can lead to unexpected scrutiny and severe consequences.

What are your core reporting obligations? The "Zpravodajská Povinnost"

At the heart of CNB compliance is the legal concept of zpravodajská povinnost, or the reporting obligation. Under Czech law, this is not a voluntary act or a simple administrative task; it is a mandatory legal duty for designated entities, known as zpravodajské jednotky (reporting units), to provide required statistical data in a timely, complete, and accurate manner. This obligation cannot be refused or waived, even by citing commercial secrecy.

The SDAT system: Your mandatory gateway to the CNB

All regulatory submissions to the CNB must be made through its mandatory electronic portal, known as SDAT (sběr dat výkaznictví, or System for Data Acquisition and Transfer). Correctly navigating this system is a primary and non-negotiable compliance task for any regulated foreign entity. The SDAT system is the exclusive channel for a vast range of statistical, supervisory, and resolution data required by the CNB.

For foreign firms, the SDAT system presents a significant operational challenge. Much of the technical specification, methodological guidance, and news updates regarding the portal are published only in the Czech language. This creates a de facto regulatory barrier, transforming a technical process into a major operational risk for companies that lack local, expert support. It is a clear signal from the regulator that foreign entities must have a substantive, locally-proficient team or advisory partner to ensure compliance.

Essential technical requirements: LEI and reporting frequency

Beyond mastering the SDAT portal, compliance involves specific technical prerequisites. For any entity reporting transactions under the EU's Markets in Financial Instruments Regulation (MiFIR), which is fully implemented in Czech law, obtaining and using a Legal Entity Identifier (LEI) is mandatory. The LEI is a global reference code that identifies a unique legal entity participating in financial transactions.

Furthermore, it is crucial to recognize that CNB reporting is not a simple annual filing. It is an ongoing process with submission frequencies that vary from monthly to quarterly or annually, depending on the type of data and your firm's specific classification. A regulated entity's obligation to report begins immediately upon receiving its license or completing the EU passporting process and registering in the Commercial Register.

FAQ – Legal tips about CNB reporting systems

• What is the SDAT system?
  It is the CNB's mandatory electronic portal for all regulatory reporting. Failure to use it correctly can lead to immediate compliance issues. ARROWS can guide you through the registration and submission process. For assistance, contact us at office@arws.cz. 
• Is a Legal Entity Identifier (LEI) required?
  Yes, an LEI is mandatory for reporting transactions under EU MiFIR rules. Our team can assist with the application process to ensure you are compliant. Get help by writing to office@arws.cz. 
• Can we delay our reporting if our company isn't fully operational?
  Yes, in some cases. A deferral of reporting obligations may be requested after a license is granted, but this requires formal communication with the CNB. We can manage this process for you. Need legal help? Contact us at office@arws.cz. 

Common pitfalls: Where foreign firms go wrong with CNB obligations

Navigating the CNB's requirements can be challenging, and several common pitfalls can expose foreign firms to penalties. These range from simple procedural errors to more significant oversights, all of which attract the regulator's attention.

The most frequent violations often stem from a misunderstanding of the strictness and formality of the process. For example, the CNB's sanctioning practices in 2023 and 2024 showed that many alternative fund managers were penalized for procedural failures. The most common misconduct was the late submission of annual reports or filing reports with data discrepancies. Fines for these seemingly minor issues were typically around CZK 50,000 and in some cases reached CZK 100,000.

Another critical mistake is ignoring official communications from the CNB. The regulator usually issues a call for remedial action before initiating formal proceedings. Failing to respond to these reminders is a common error that escalates a minor issue into a formal sanction with financial penalties.

Other frequent breaches include failing to notify the CNB of material changes, such as new appointments to the board of directors, and maintaining incomplete records of client transactions, which violates MiFID II rules and leaves a firm defenseless in potential disputes.

Penalties for common reporting and procedural errors

Risks and penalties	How ARROWS helps
Failure to submit reports via SDAT or submitting inaccurate/late data: Fines up to millions of CZK, initiation of a full supervisory inspection.	Drafting legally required documentation: We ensure your reports are accurate and submitted on time via SDAT. Get tailored legal solutions by writing to office@arws.cz.
Incomplete records of client communications or transactions: Sanctions for breaching MiFID II rules, inability to defend against client disputes.	Preparation of internal company policies: We create robust, compliant record-keeping policies to protect your firm. For immediate assistance, write to us at office@arws.cz.
Failure to notify the CNB of material changes (e.g., in management): Administrative penalties and potential challenges to the firm's "fitness and properness".	Legal consultations to prevent penalties: We manage all your mandatory communications with the CNB. Need legal help? Contact us at office@arws.cz.
Ignoring official calls for remedial action from the CNB: Escalation from a simple request to a formal sanction proceeding with fines.	Representation before public authorities: We act as your representative, ensuring all CNB inquiries are handled professionally and promptly. Our lawyers are ready to assist you – email us at office@arws.cz.

The high cost of non-compliance: Understanding the full spectrum of CNB sanctions

The consequences of failing to meet your legal obligations to the CNB are severe and multi-faceted, impacting your company’s finances, operations, and long-term reputation. These are not theoretical risks; the CNB actively imposes sanctions, and no institution is too large or small to escape scrutiny.

The CNB has a wide array of enforcement tools at its disposal. Sanctions can range from a formal warning (admonition) for minor offenses to substantial fines and, in the most serious cases, the suspension or complete revocation of your license to operate in the Czech Republic. The financial penalties can be substantial. For instance, major securities dealer BH Securities was fined CZK 10 million for failures related to providing investment services. 

Contact our experts:

The reputational "Death Sentence" of public disclosure

Perhaps the most damaging consequence of a CNB sanction is its public nature. The CNB is required by law to publish its final decisions on remedial measures and administrative penalties on its website, making them accessible to the public. This creates a permanent, searchable, and official record of your company's non-compliance.

For a foreign brand built on trust, integrity, and a flawless track record, this public disclosure can be more damaging than the financial penalty itself. It can be used by competitors, flagged by due diligence teams in future M&A activities, and erode trust with clients, partners, and other regulators across the EU. This reputational harm is a significant and lasting business risk that must be managed proactively.

Breaches of the foreign exchange act (Devizový zákon)

Beyond the standard financial market regulations, foreign entities must also be aware of the Czech Foreign Exchange Act (Devizový zákon, Act No. 219/1995 Coll.). This law governs cross-border transactions and includes its own set of reporting obligations and a distinct, severe penalty framework for violations.

Failure to comply with the reporting duties under this act can lead to fines of up to CZK 100,000. More serious offenses, such as violating prohibitions declared during a state of emergency in foreign exchange management, can result in fines of up to CZK 20 million. For certain violations, penalties can even be calculated as a percentage of the transaction value, making compliance absolutely critical for companies engaged in significant cross-border capital flows.

Sanctions for Major Substantive and Systemic Failures

Risks and penalties	How ARROWS helps
Systemic AML/CFT failures (e.g., inadequate internal policies, failure to report suspicious transactions): The highest level of fines, potentially up to CZK 130 million, and criminal liability.	Drafting legally required documentation: We design and implement a robust, risk-based AML/CFT framework for your firm. Do not hesitate to contact our firm – office@arws.cz.
Violating the Foreign Exchange Act (Devizový zákon): Fines up to CZK 20 million or a percentage of the transaction value.	Legal opinions: We provide clear analysis of your cross-border transactions to ensure full compliance with the Foreign Exchange Act. Get tailored legal solutions by writing to office@arws.cz.
Management failing the "fit and proper" test or lack of genuine local substance: Forced removal of key personnel, license revocation for being a "letterbox company".	Legal consultations: We vet your proposed management against CNB criteria and advise on establishing a compliant operational presence. For immediate assistance, write to us at office@arws.cz.
Breach of prudential rules (e.g., capital adequacy, risk exposure): CNB-imposed business restrictions, mandatory recapitalization orders, and license suspension.	Contract drafting or review: We review and structure your financial operations and internal policies to meet strict prudential requirements. Need legal help? Contact us at office@arws.cz.

How ARROWS helps you avoid legal risk and ensure smooth operations

The complexity of CNB regulations and the severity of the penalties for non-compliance make expert legal guidance essential. A proactive approach focused on prevention is far more effective and cost-efficient than reacting to a CNB investigation after a breach has occurred.

At ARROWS, we serve as a strategic partner to our international clients, helping them build robust compliance frameworks from the ground up. Our services are designed to prevent issues before they arise. This includes the preparation of internal company policies for everything from record-keeping to AML/CFT, ensuring they are tailored to both your business model and the specific requirements of Czech law. We also provide professional training for employees and management, equipping your team with the knowledge to identify and manage regulatory risks effectively.

As an international law firm operating from Prague, European Union, we possess a unique advantage. Our lawyers combine deep knowledge of the local legal environment with a nuanced understanding of foreign markets and the legal differences between the Czech Republic and other jurisdictions. This allows us to translate complex Czech requirements into clear, actionable advice for your global headquarters. Through our ARROWS International network, built over 10 years and operating in 90 countries, we are perfectly positioned to handle any cross-border matter.

Our comprehensive service offering is designed to provide end-to-end support, including legal consultations, contract drafting, representation before the CNB, legal opinions on complex transactions, and assistance with obtaining all necessary licenses and approvals. With a client base that includes over 150 joint-stock companies and 250 limited liability companies, we have a proven track record of delivering high-quality, efficient legal solutions.

FAQ – Legal tips about Proactive Compliance

• How can we prepare for a CNB inspection?
  A robust internal governance framework and meticulous documentation are key. We conduct mock audits and prepare your team to handle any inquiry, ensuring you can reconstruct and defend your compliance decisions. Get tailored legal solutions by writing to office@arws.cz. 
• Does our home country's compliance policy suffice?
  Unlikely. While it is a good start, Czech law has specific requirements for internal controls, AML, and governance that must be met. We can perform a gap analysis and adapt your existing policies for the local market. For immediate assistance, write to us at office@arws.cz. 

What’s your next step? Secure your Czech operations today

CNB compliance is a complex and high-stakes area for any foreign company operating in the Czech financial market. The potential for multi-million CZK fines, operational disruptions, and lasting reputational damage is significant. However, with the right expert legal partner, navigating the system is entirely manageable.

Don't let regulatory uncertainty put your Czech investment at risk. Our team at ARROWS, a leading Czech law firm in Prague, EU, specializes in guiding foreign companies through every aspect of CNB compliance. We provide the proactive advice and hands-on support you need to operate with confidence. To schedule a consultation and build your robust legal strategy, contact us today at office@arws.cz.

FAQ – Most common legal questions about CNB penalties

1. What is the very first step we should take to ensure CNB compliance upon entering the Czech market?
The first step is a comprehensive legal consultation to map out all applicable regulations based on your specific business activities. This includes identifying all reporting obligations, establishing a timeline for registrations (including SDAT and LEI), and vetting your proposed management against the "fit and proper" criteria. To start this process, contact our experts at office@arws.cz.

2. How are CNB fines calculated, and is there any room for negotiation?
Fines are determined based on the severity, duration, and impact of the violation, with specific maximums set by law (e.g., the Act on Banks, the Foreign Exchange Act). While the CNB has discretion, the process is formal. Effective legal representation during the administrative proceedings is crucial for presenting mitigating factors and ensuring a fair outcome. For representation in such matters, write to us at office@arws.cz.

3. Can individual managers or directors be held personally liable for a company's reporting failures?
Yes, under certain Czech laws, management can be held accountable, especially for serious breaches of prudential rules or AML regulations. The CNB can also deem an individual as not "fit and proper," effectively banning them from holding managerial positions in the financial sector. To understand the specific liabilities for your management team, email us at office@arws.cz.

4. We already have an in-house legal team. Why do we need a local Czech law firm like ARROWS?
While your in-house team is invaluable, local expertise is irreplaceable for navigating the specifics of Czech law, the Czech-language SDAT portal, and the unwritten practices of the CNB. We act as an extension of your team on the ground, bridging the gap between your global policies and local requirements. Get tailored legal solutions by writing to office@arws.cz.

5. How long does a typical CNB sanction proceeding take from start to finish?
The timeline can vary significantly, from several months to over a year, depending on the complexity of the case. The CNB can suspend proceedings to request additional information, which often causes delays. A meticulously prepared initial response can significantly speed up the process. Our lawyers are ready to assist you – email us at office@arws.cz.

6. Besides reporting, what is the single biggest compliance risk for a foreign financial firm in the Czech Republic?
One of the biggest risks is failing to establish a genuine physical presence and substantive local management. The CNB is highly skeptical of "letterbox companies" and can revoke a license if it determines the Czech entity lacks real substance and is not genuinely managed from within the country. For advice on structuring your local presence, do not hesitate to contact our firm – office@arws.cz. 

Don't want to deal with this problem yourself? More than 2,000 clients trust us, and we have been named Law Firm of the Year 2024. Take a look HERE at our references.