Compliance Node Overview
Hungary's Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Az információs önrendelkezési jogról és az információszabadságról szóló 2011. évi CXII. törvény - Infotv), published in the Hungarian Official Gazette (Magyar Közlöny) on 26 July 2011 and subsequently substantially amended to align with the EU General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) by Act LIV of 2018 and subsequent amendments, is Hungary's primary national data protection legislation. The GDPR is directly applicable Hungarian law by virtue of Hungary's EU membership. The Infotv was significantly restructured by the 2018 amendments to remove provisions now covered directly by GDPR while retaining national derogations and additions. Hungary's Infotv is distinctive in combining personal data protection (informational self-determination - információs önrendelkezési jog) with freedom of information (information freedom - információszabadság) in a single legislative framework. Enforcement: the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH - National Authority for Data Protection and Freedom of Information) is Hungary's independent data protection and freedom of information supervisory authority. The NAIH is Hungary's representative on the European Data Protection Board (EDPB) and participates in the EDPB's one-stop-shop mechanism for cross-border processing. Key Hungarian national provisions: (1) Age of digital consent: Hungary has maintained the GDPR default of 16 years for information society services; data subjects under 16 require parental or guardian consent; (2) Freedom of information - the Infotv's freedom of information provisions govern public access to information held by public bodies, which interacts with GDPR for personal data in public documents; the constitutional right to access public data (közérdekű adatok) under the Hungarian Fundamental Law (Alaptörvény) supplements GDPR; (3) Employment context - Hungarian labour law, particularly the Labour Code (Munka Törvénykönyve - Mt., Act I of 2012), contains provisions on employee monitoring and privacy in employment that apply alongside the Infotv and GDPR; (4) Health data - the processing of health data in Hungary is subject to specific Hungarian health legislation in addition to GDPR; (5) Criminal data - the Infotv restricts private entity processing of criminal conviction data; (6) Sensitive data - special category data processing is subject to GDPR Art. 9 conditions and any additional Hungarian statutory requirements. Fines: GDPR administrative fines apply in Hungary - up to EUR 20 million or 4% of global annual turnover. The NAIH has imposed significant fines and issued enforcement decisions, including in the areas of employment data, healthcare data, and public authority processing.
Pillar: Cybersecurity · Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH - National Authority for Data Protection and Freedom of Information, Hungary) · Version: 1.0.0 · Last updated:
Primary source: https://www.naih.hu/
SHA-256 integrity: a5f21d74f9888a41ace84a592a10bc962cbc38e364767ff8b02820d7dbbc9e15
Primary Citations — 6 traced to source
- Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv, Hungary, as amended by Act LIV of 2018) - combines personal data protection (informational self-determination) with freedom of information in a single framework; national derogations: age of digital consent 16 years (GDPR default maintained); employment monitoring requires advance employee notice; works council consultation before monitoring changes; constitutional right to data protection and information access under Alaptörvény Art. VI
- EU GDPR (Regulation (EU) 2016/679) - directly applicable in Hungary; fines up to EUR 20 million or 4% of global annual turnover; NAIH is Hungary's supervisory authority and EDPB member; 72-hour breach notification to NAIH under Art. 33; DPIA mandatory for high-risk processing under Art. 35; NAIH enforces GDPR and Infotv across employment, healthcare, and public authority sectors
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access