Magyarország · Hungarian Data Protection Act (Act CXII of 2011)
TL;DR
Websites targeting users in Hungary must comply with GDPR as implemented locally through the Hungarian Data Protection Act (Act CXII of 2011). The supervisory authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH). Use our free scanner below to check your website instantly.
Free audit — 25+ automated checks in 60 seconds
Scan My Website Free →Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Website
www.naih.hu ↗Local Law
Hungarian Data Protection Act (Act CXII of 2011)
Language
Hungarian
Population
9.7 million
Cookie consent must be freely given and informed
DPO required for organizations specified by law
Data breach notification within 72 hours to NAIH
Special provisions for political party data processing
Employee data processing requires legal basis beyond consent
Direct marketing requires prior opt-in consent
Hungary's NAIH has been active in enforcing GDPR particularly around direct marketing, telecom, and financial sector data processing.
Cookie consent banner that requires opt-in before non-essential cookies
Privacy policy available in Hungarian
Clear identification of data controller and contact details
Data Processing Agreement (DPA) with all third-party processors
Lawful basis documented for each processing activity
Data Subject Access Request (DSAR) process in place
Data breach notification procedure compliant with 72-hour rule
Data Protection Impact Assessment for high-risk processing
International data transfer mechanisms documented (SCCs, adequacy decisions)
Records of processing activities (ROPA) maintained
In Hungary, websites must comply with GDPR as implemented by the Hungarian Data Protection Act (Act CXII of 2011). Key requirements include obtaining explicit consent before setting non-essential cookies, providing a clear privacy policy, appointing a DPO when required, and notifying data breaches within 72 hours to the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).
The Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) is the supervisory authority responsible for enforcing data protection laws in Hungary. They can investigate complaints, conduct audits, and issue fines up to €20 million or 4% of annual global turnover.
Use PrivacyChecker's free scanner to perform an instant audit of your website. Our tool checks 25+ compliance points including cookie consent, privacy policy presence, security headers, tracker detection, and more — all relevant to Hungary's GDPR requirements.
Find out in 60 seconds with our free GDPR scanner
Run Free Audit →