Harmonisation of Hungarian information protection law with GDPR

Internet IT Data protection 2018-07-04

In the past months, one of the most relevant news and legal topic has been that of data processing. And alas the regulation of data processing in Hungary has arrived to a new milestone on July 17th 2018, when the Hungarian Parliament adopted an amendment of Act 113 of 2011 on the Right of Informational Self-Determination and on the Freedom of Information („Info Act”). The amendment of the Info Act is supposed to implement the rules of the General Data Protection Regulation 2016/679 (April 27th 2016.) of the European Union.

The main purpose of GDPR and the amended Infoact is to provide relevant protection to the data of european citizens, by adopting new acts, rules and regulations regarding data protection. By harmonising the national and European laws, Hungary is fulfilling it’s duties arising from the country’s EU membership.

Before the GDPR came into force, there have not been any laws in Hungary that could thoroughly prepare the legal system for the implementation of the new regulation, but Info Act has been considered one of the strictest as per data processing in Europe. By adopting the new amendment, the Hungarian Parliament aims to solve the uneasiness and uncertainty resulting from the GDPR in force and the lack of proper local legislation to pair with.

Despite all the effort and the legal steps towards an effective data protection regulation, the legal basis of data protection in Hungary is still incomplete and difficult to oversee. Because of these reasons, a more thorough revision of the data protection laws is expected to follow the amendment, with the purpose of a better implementation of European standards. The lack of certainty concerning the legal basis of data protection creates a need for professional legal help regarding data controllers.

We have collected the most important changes in the amended Info Act:

The supervisory authority regarding the compliance with GDPR is the Hungarian Data Protection and Freedom of Information Agency (locally: NAIH), with the exception of courts, over which the NAIH has no authority.

§ If the data controllers or data processors fail to comply with the law, the NAIH may fine the data controller or data processor for an amount of up to 20 million HUF.

The data subject is entitled to bring private actions against the data controllers and data processors for violations. The data subject is entitled to make claims for any damages and also exemplary damages. The data controller or data processor may prove that they comply with the law.

The scope and application of the Infoact has been substantially extended to better comply with GDPR. If the controller’s main establishment or place of business is located in Hungary, or if the processing operations relate to the offering of goods or services to data subjects located in Hungary, the infoact is applicable. The scope of the act is also extended to manual data processing.

According to the new law, mandatory data processing must be settled by an act and no lesser legal source may suffice . The data controller must revise after 3 years and maintain any and all data for at least 10 years.

The amended Info Act aims to protect the data of deceased as well. The relatives of the deceased have the right to erasure and restriction on processing within five years of death. The age of consent applicable to a child’s consent regarding information society services is 16 years.

Criminal records may only be processed with the data subject’s explicit consent or if the data processing is necessary for the exercise or defense of a legal claim. Health data may only be processed with the data subject’s explicit written consent.

In case of any doubt or questions in regards of the Hungarian data processing regulation, do not hesitate to contact our professional colleagues.

Olvassa el szakmai blogunk bejegyzéseit

Szakmai blogunkban gyakran előforduló jogi eseteinkbe engedünk bepillantást

Megnézem az összes bejegyzést

Personal Income Tax Exemptions and Tax Allowances: What Rules Apply under the Personal Income Tax Act, and What Are the Biggest New Developments of Recent Years?

2026-07-20

Under the rules currently in force, the general rate of personal income tax (PIT) is 15 per cent of the tax base. In everyday language, many people lump the different concepts together and simply call every case in which no tax is deducted from their gross salary a “tax exemption.” From a legal-dogmatic perspective, however, classical tax exemption must be sharply distinguished from tax allowances. While tax-exempt revenues do not form part of the tax base in the first place, the tax system also recognises different rules that result in a reduction of the private individual’s tax: these are tax allowances reducing the consolidated tax base.

A particular characteristic of personal income tax is that these tax allowances and tax exemptions may be claimed only against income falling within the consolidated tax base and the tax thereon, and exclusively up to that amount.

Tovább olvasom

EU Artificial Intelligence Act

IT 2026-07-20

Regulation (EU) 2024/1689 of the European Parliament and of the Council laying down harmonised rules on artificial intelligence represents a landmark step in reconciling innovation with the protection of fundamental rights in the digital sphere. The Regulation’s primary objective is to improve the functioning of the internal market and to promote the uptake of human-centric and trustworthy artificial intelligence (AI) within the European Union. At the same time, the Regulation attaches particular importance to ensuring a high level of protection of health, safety and fundamental rights—including democracy, the rule of law and environmental protection—against the potentially harmful effects of AI systems.

Tovább olvasom

Managing overdue monetary claims: A practical guide to the order for payment procedure

Követelés kezelés 2026-06-25

When enforcing overdue monetary claims, the time and cost involved in court litigation often act as a deterrent for the claimant. However, the Hungarian legal system provides a faster alternative that dispenses with the taking of evidence, known as the order for payment procedure (FMH).

This substitute for litigation, a simplified civil non-contentious procedure, is one of the most effective legal tools for enforcing claims, provided that the obligor does not contest the debt on the merits.

Tovább olvasom

Two High-Profile Parliamentary Investigations Launched: Independent Committees to Uncover the Situation of Child Protection and the Background of the Pardon Decision

2026-06-22

The National Assembly has adopted its individual resolutions on the election of the members and officers of the investigation committees, thereby concluding the procedural process of establishing the bodies. Under the decisions, both the Investigation Committee Uncovering the Systemic Crisis of Child Protection and the Investigation Committee Uncovering Those Responsible for the Pardon Scandal have received their final personnel compositions, allowing the elected representatives to immediately begin performing their independent duties as set out in the resolutions.

Tovább olvasom

Mandatory Online Withdrawal Function on Webshops

Trade 2026-06-08

In our previous article titled “Significant Changes in Consumer Protection in 2026”, we presented the significant changes that the relevant Government Decree will bring to consumer protection this year. In this article, we present in more detail what webshops and consumers can expect in relation to the “online withdrawal function” already outlined there.

Tovább olvasom