🇭🇺Act CXII of 2011 on Informational Self-Determination and Freedom of Information

← Back to laws in Hungary

Act CXII of 2011 on Informational Self-Determination and Freedom of Information

Hungary applies this national law alongside the GDPR. The summary below concentrates on the national overlay so that the GDPR baseline is not duplicated.

How the national law fits with GDPR

Infotv. supplements the GDPR in the provisions expressly listed by section 2, regulates other personal-data processing and NAIH procedure, and also establishes Hungary's freedom-of-information regime.

National additions and variations

• Section 2 precisely allocates which Infotv. provisions supplement GDPR processing and which regimes apply to law-enforcement, national-security and other processing; applicability must be classified before controls are selected.
• Sections 25/A-25/F provide detailed accountability, security, record and electronic-log rules for the processing regimes to which they apply, including controlled access to logs and defined retention.
• Section 25/G establishes impact-assessment and prior-consultation rules for high-risk processing in the national regimes covered by that chapter.
• Sections 52-60 and 60/A-60/B establish complaint, investigation, data-protection proceeding and audit routes before NAIH, with production and cooperation powers.
• Chapter III separately governs access to and proactive publication of public-interest and publicly accessible data; disclosure requests must not be processed as ordinary GDPR access requests.

Operational approach

First maintain the GDPR control set. Then document whether this country is in scope and apply the national controls to the affected people, systems and processing. Keep article-level evidence for child consent, employment, special-category or criminal data, research, electronic communications, identifiers, surveillance and any rights restriction relied upon.