Hungary2024. évi LXIX. törvény, National Cybersecurity Certification Schemes
37. és 38. §, 2024. évi LXIX. törvény (IV. fejezet)
In force since .
A product security requirements rule binding public and private bodies.
- Private right of action
- No
- Obligation class
- Security, DPIA
As of .
What it requires
- If you design or run a national cybersecurity certification scheme for ICT products, services or processes in Hungary, make the scheme meet the Section 38 security objectives, including protection of data across the life cycle, identification and documentation of known dependencies and vulnerabilities, security by default and by design, up-to-date software and hardware, and mechanisms for secure updating (Section 38).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Settledness
- As of
What this law does
Chapter IV of the Cybersecurity Act covers national cybersecurity certification and the activity of the national cybersecurity certification authority under Regulation (EU) 2019/881, and the Act on conformity assessment bodies does not apply to them (Section 37).
A national cybersecurity certification scheme must meet eleven security objectives, which include protecting stored, transmitted or processed data across the whole life cycle of the ICT product, service or process, identifying and documenting known dependencies and vulnerabilities, and making the product secure by default and by design (Section 38). The Act entered into force on (Section 82(1)).
When LexLint raises it
When your app profile says your app distributes a software product.