Hospitals are facing cyberattacks, but they can't get insurance. The law is holding them back

19 \ 03 \ 2026

Cyberattacks pose a very real risk to today’s hospitals, and their frequency is on the rise. And although demand for cyber risk insurance is growing, state and regional facilities are facing a legal vacuum. The current law, enacted at the turn of the millennium, understandably did not anticipate the need for insurance covering virtual infrastructure. Cyber risk insurance was discussed at the conference organized by the healthcare journal Právo and Risk Management.

The current legislative framework is a trap for the managements of large hospitals. A partner at the law firm Portos Jan Fical described the situation in practice: "We encounter this issue with large hospitals established by the state, where the interpretation of the Act on the Management of State Property is too problematic to allow the conclusion of cyber security insurance. It is rather restrictive," he pointed out the problem.

More at zdravotnickydenik.cz