Hungary. Comprehensive data protection. Act
Infotv.Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Hungary's Infotv. combines GDPR implementation, the Law Enforcement Directive and freedom of information in one act, and establishes NAIH. Sector rules were aligned by a 2019 omnibus amendment.
- Key themes
- Unique features
Age of digital consent (GDPR Art 8): 16. Single authority for data protection and freedom of information; NAIH must generally warn SMEs before fining for first breaches; Labour Code contains employee monitoring rules.
- SaaS relevance
Applies alongside the GDPR to any SaaS provider established in, or targeting users in, this country; national rules on age of consent, employee data and offences shape onboarding and HR-related features.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- Authority 72h; individuals without undue delay (GDPR Arts 33-34)
- DPO
- Conditional
- Cross-border transfers
- GDPR Chapter V (adequacy/SCCs/BCRs)
- Maximum penalty
- GDPR Art 83: €20m or 4% global turnover
§3Dates
- Key dates
- Adopted
- In force
- Amended for GDPR by Act XXXVIII of 2018 (in force 2018-07-26) and Act XXXIV of 2019
§4Text and authority
- Text
- Authoritative text njt.hu
- English text naih.hu
- Authority
- Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
§5Where it applies
- Domestic law of
- Hungary
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.