HungaryAct LXXV of 2025 on the Domestic Implementation of the EU AI Regulation
In force since .
An AI governance rule binding public and private bodies.
- How the hook was established
- express
- What makes it apply
- Market targeting, Place of effect
- Obligation class
- Governance
- Audit expectation
- on_request
- Who audits it
- Regulator
What it requires
- Stop unlawful conduct or restore a lawful state when Hungary's AI market surveillance authority, the minister responsible for business development under Government Decree 344/2025 (X. 31.), so orders under Section 7(1) of Act LXXV of 2025; the same authority may also impose an administrative fine or declare your AI system's use unlawful.NIST AI RMFMANAGE 2.4
- Where you test an AI system under real-world conditions in Hungary, supply data to the AI market surveillance authority when it requires it and allow its remote or on-site inspections without prior notice, under Section 7(2).NIST AI RMFGOVERN 1.1
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- GOVERN 1.1Legal and regulatory requirements involving AI are understood, managed, and documented.
- MANAGE 2.4Mechanisms are in place and applied, and responsibilities are assigned and understood, to supersede, disengage, or deactivate AI systems that demonstrate performance or outcomes inconsistent with intended use.
- NIST AI 600-1
- GAI-RISK-07Human-AI Configuration
- NIST AI 200-2 Draft
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI09Human-Agent Trust Exploitation
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-005System Acceptance Testing
- AIR-PREV-006Data Quality & Classification/Sensitivity
- AIR-PREV-024Human-in-the-Loop Action Approval Gate
- AIR-DET-004AI System Observability
- AIR-DET-011Human Feedback Loop for AI Systems
- AIR-DET-021Agent Decision Audit and Explainability
- ETSI EN 304 223
- 5.1.4-1Capability for human oversight designed in and maintained.
- 5.2.1-1Full inventory of assets, including their dependencies and connections.
- 5.2.4-1Developers keep an audit trail of system design and post-deployment maintenance plans and offer it downstream.
- 5.4.2-1Operators log system and user actions.
Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
Who enforces it
Enforcement body
Hungary's AI market surveillance authority is the minister responsible for business development, who is also the single point of contact, and its AI notifying authority is the National Accreditation Authority (Nemzeti Akkreditáló Hatóság), both designated by Government Decree 344/2025 (X. 31.) under the authorization in Section 11(1) of Act LXXV of 2025; the Act's own text does not name them. Since , Section 168/A of Government Decree 90/2026 makes the Minister of Science and Technology the Government's member responsible for business development in AI-related tasks.
Settledness
The authority's own website says that the Authority operates as an organizational unit of the Ministry of Science and Technology.
- As of
- Open questions
- Does the designation of 'a vállalkozásfejlesztésért felelős miniszter' (the minister responsible for business development) in Section 1(1)(b) of Government Decree 344/2025 (X. 31.), which has not itself been amended, now identify the Minister of Science and Technology as the 'MI piacfelügyeleti hatóság' (AI market surveillance authority) that issues decisions under Section 7(1), given that Section 168/A of Government Decree 90/2026 (V. 13.) makes that minister the Government's member responsible for business development in AI-related tasks?
- Does the power in Section 7(2) to require data and to inspect without prior notice for 'a valós körülmények közötti fejlesztés biztonságos tesztelése' (safe testing in real-world conditions) reach a deployer that takes part in a provider's real-world test, or only 'a szolgáltatókat és a leendő szolgáltatókat' (providers and prospective providers)?
What it makes you log
Who may demand the log
Regulator
Logging duty
Section 7(2) obliges providers and prospective providers, during real-world testing, to supply data to the AI market surveillance authority on that authority's demand, alongside a separate power to inspect without notice. The data-supply half addresses the party directly and cannot be met without something already kept to hand over, which is the family's own implicit shape; the Act's own words do not itemize what that data must contain. The Artificial Intelligence Council and the sandbox are otherwise designation and support machinery, not a duty of their own. The EU AI Act's own logging duties (Articles 12, 19, 53, 55) are the EU Regulation's own.
- Kind
- Implicit
- As of
- Provision
- Section 7(2)
- Trigger
- high_risk_systems
What this law does
Act LXXV of 2025 builds Hungary's domestic institutional framework for the EU AI Act. Section 11(1) authorizes the Government to designate, by decree, the AI notifying authority and the AI market surveillance authority; the Act itself does not name them.
Government Decree 344/2025 of designates the National Accreditation Authority (Nemzeti Akkreditáló Hatóság) as the AI notifying authority, and the minister responsible for business development as the AI market surveillance authority and the single point of contact.
A Hungarian Artificial Intelligence Council, drawing one delegate each from bodies including the National Media and Infocommunications Authority, the Hungarian National Bank, the Competition Authority, the data protection authority NAIH, the Regulated Activities Supervisory Authority, and the National Intellectual Property Office, advises on national AI strategy and reviews the AI regulatory sandbox.
Section 7(1) empowers the AI market surveillance authority to impose an administrative fine, declare an AI system's use unlawful, or order the offender to stop the unlawful conduct or restore a lawful state, with the fine's amount and procedure left to the same government decree. Section 10 has the AI market surveillance authority establish and operate the AI regulatory sandbox under Article 57 of Regulation (EU) 2024/1689.
The Act's own closing provisions set general commencement at the thirty-first day after promulgation. The Act was promulgated on , so general commencement is . Sections 3(2) and 10 are a stated exception, taking effect on .
When LexLint raises it
When your app profile says your app makes high-risk automated decisions, deploys a chatbot, generates content with AI, crawls the web or trains models.
Back to the example · Lint your app
Page updated .