Hungary

Act LXXV of 2025 builds Hungary's domestic institutional framework for the EU AI Act. Section 11(1) authorizes the Government to designate, by decree, the AI notifying authority and the AI market surveillance authority; the Act itself does not name them.

Government Decree 344/2025 of 31 October 2025 designates the National Accreditation Authority (Nemzeti Akkreditáló Hatóság) as the AI notifying authority, and the minister responsible for business development as the AI market surveillance authority and the single point of contact.

A Hungarian Artificial Intelligence Council, drawing one delegate each from bodies including the National Media and Infocommunications Authority, the Hungarian National Bank, the Competition Authority, the data protection authority NAIH, the Regulated Activities Supervisory Authority, and the National Intellectual Property Office, advises on national AI strategy and reviews the AI regulatory sandbox.

Section 7(1) empowers the AI market surveillance authority to impose an administrative fine, declare an AI system's use unlawful, or order the offender to stop the unlawful conduct or restore a lawful state, with the fine's amount and procedure left to the same government decree. Section 10 has the AI market surveillance authority establish and operate the AI regulatory sandbox under Article 57 of Regulation (EU) 2024/1689.

The Act's own closing provisions set general commencement at the thirty-first day after promulgation. The Act was promulgated on 31 October 2025, so general commencement is 1 December 2025. Sections 3(2) and 10 are a stated exception, taking effect on 2 August 2026.

Government Decree 344/2025 of 31 October 2025 implements Act LXXV of 2025 on the domestic implementation of the EU AI Regulation. Section 1(1) designates the National Accreditation Authority (Nemzeti Akkreditáló Hatóság) as the AI notifying authority, and the minister responsible for business development as the AI market surveillance authority and the single point of contact.

Section 1(3) puts beyond the competence of the notifying and market surveillance authorities those providers and deployers, within the meaning of Article 3 of the Regulation, for whom a statute or government decree so provides. Under Section 2(5) a designated conformity assessment body sends the AI notifying authority, by 31 January each year, a report on the conformity assessment activity it carried out in the previous year.

Under Section 3(2) the AI market surveillance authority may settle a matter by a written administrative agreement with the party instead of deciding it on the merits. Under Section 4(1) the administrative fine under Act LXXV of 2025 can be as high as the amount set in Articles 99 and 100 of the Regulation. Where the Regulation fixes a maximum in euros, Section 4(1) applies HUF 13,300,000,000 for Article 99(3), HUF 5,700,000,000 for Article 99(4) and HUF 2,850,000,000 for Article 99(5).

Under Section 4(2) the fine is payable to the AI market surveillance authority within 30 days. Section 6 provides that the decree takes effect on the thirty-first day after its promulgation. The decree was promulgated on 31 October 2025, so it took effect on 1 December 2025. Point (e) of Section 5(1) has been repealed by Section 7 of Government Decree 224/2026 of 1 October 2026.

Section 204 criminalizes acquiring, offering, producing, or distributing a pornographic image depicting a person under eighteen, with a definition, read verbatim, that reaches synthetic content without naming AI: paragraph (8) defines a pornographic image for this section to include the realistic depiction of a non-existent person or persons. A wholly AI-generated image with no real child behind it falls inside the offense on that text alone.

The current text of the 'Gyermekpornográfia' subtitle, Sections 204 and 204/A, was substituted whole by Section 20 of Act LXXIX of 2021. That Act's own Section 24(1) puts it into force on the 15th day after promulgation, outside the narrower exception in Section 24(2). The Act was promulgated on 23 June 2021. The Nemzeti Jogszabálytár's text of the Criminal Code that carries Section 204(8) as set out by that Act is dated 8 July 2021.

Section 35/A(4) of the Health Data Act lets the operator of the Electronic Health Service Space (EESZT), on request, permit access to the data stored there for AI development, meaning the training, testing and evaluation of AI algorithms and the development of medical devices and digital health applications. Section 35/A(5) confines that development to a secure processing environment inside the EESZT.

The secure processing environment logs access to it and the activities carried out in it, and keeps the entries for one year. Under Section 35/A(7), AI development in the secure processing environment may be permitted only on anonymous data, and only for a person who holds the permit for scientific research issued by the competent ethics committee of the Health Science Council (Egészségügyi Tudományos Tanács).

That person must ensure that what is learned during AI development is used only for it, guarantee that development uses only anonymous data, give adequate safeguards against use outside the permit and for the protection of individuals, and carry out a data protection impact assessment before development starts. Section 35/A(8) has the operator and the applicant agree the conditions for using the data and for making the results available.

Section 35/A(4) was inserted by Section 25 of Act XXIX of 2024. Section 25 of Act XXIX of 2024 sits in the twelfth subtitle of that Act, which amends the Health Data Act. Section 3(15) of Act XXIX of 2024 puts its twelfth subtitle into force on 1 January 2026.

Section 156, paragraph 2 of the Act on Electronic Communications defines a breach of subscriber personal data as the accidental or unlawful handling or processing of personal data transmitted, stored or otherwise handled in connection with publicly available electronic communications services, in particular its destruction, loss, alteration, unauthorized disclosure or publication, or unauthorized access to it.

Paragraph 3 requires an electronic communications service provider that detects a personal data breach to notify the Authority without delay. The Act defines the Authority as the National Media and Infocommunications Authority (Nemzeti Média- és Hírközlési Hatóság). Paragraph 4 requires providers to keep a register of personal data breaches that records their essential circumstances, their effects and the corrective measures the provider took.

The register must cover every fact and circumstance that lets the Authority check whether the provider met its duty to notify the person concerned. Paragraph 5 requires the provider also to notify the subscriber or other individual without undue delay where the breach is likely to harm their personal data or privacy.

Paragraph 5 lifts that duty to notify the person where the provider satisfactorily shows the Authority that it applied appropriate technical protection measures to the data affected.

A controller must notify NAIH without undue delay, and within 72 hours where feasible, after becoming aware of a personal-data breach, unless the breach is unlikely to result in a risk to people's rights and freedoms, and must notify the affected individual without undue delay where the breach is likely to result in a high risk.

Sections 25/J and 25/K of the Information Act set a parallel duty, with a 72-hour deadline, for controllers processing personal data for law-enforcement, national-security or defence purposes, which Section 2(3) places under the Act itself; they are not among the provisions Section 2(2) applies to processing the General Data Protection Regulation (GDPR) governs. Act XXXVIII of 2018, Section 17, inserted these sections.

Hungary's data-protection act predates the General Data Protection Regulation (GDPR) by roughly six years and, unusually, originally combined data protection and freedom-of-information law in one statute; the freedom-of-information half was never split into a separate act and remains bundled alongside the data-protection half. The National Assembly adopted the Act on 11 July 2011 and it was promulgated on 26 July 2011.

Under Section 73(1) it enters into force the day after promulgation, with exceptions in paragraphs (2) and (3); paragraph (2) puts most substantive sections, including the sections numbered 1 through 37, in force on 1 January 2012, which is the date recorded here.

Rather than repeal the Infotorveny when the GDPR became directly applicable, Hungary amended it: Act XXXVIII of 2018, on amending the Infotorveny in connection with the EU data-protection reform and amending related laws, restated several of its sections, and Act XXXIV of 2019 later amended it again, so it now operates as a supplementary, mainly procedural statute alongside the Regulation.

A transfer of personal data outside the EEA requires an adequacy decision, appropriate safeguards, or a narrow Article 49 derogation, backed by the Article 83(5)(c) top fine tier.

A provider of an information society service may process personal data that are technically indispensable for providing the service. The provider may use data about the use of the service for any other purpose, such as targeted advertising or market research, only with a purpose defined in advance and the recipient's consent. The recipient must be able to prohibit that other processing before and during use of the service.

Data processed for the other purpose may not be linked to the recipient's identifying data, or passed to a third party, without the recipient's consent. The provider must delete data processed for the contract, billing and technical purposes after the contract ends or is not concluded and after billing, and data processed for the other purpose once that purpose ends or the recipient so decides.

The service may not be made conditional on consent to processing for other purposes where it is not available from another provider. The provider must let the recipient learn, before and during use, which kinds of data it processes for which purposes.

General Data Protection Regulation (GDPR) Article 22 gives a person in Hungary the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects them, unless the decision is necessary for a contract with them, authorised by a law that safeguards their rights, or based on their explicit consent.

Where it rests on a contract or consent, the controller must at least let the person obtain human intervention, express their point of view and contest the decision.

Under Article 22(4), such a decision may not rest on the special categories of personal data in Article 9(1) unless the person gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of proportionate Union or Member State law, with suitable safeguards in place.

Articles 13(2)(f), 14(2)(g) and 15(1)(h) require the controller to tell the person that such decision-making takes place, with meaningful information about the logic involved and its significance and envisaged consequences for them, at collection, within the Article 14(3) period where the data came from another source, and on an access request.

The Information Act's own automated-decision provision (Section 6) is not among the provisions Section 2(2) applies to processing the GDPR governs.

Under General Data Protection Regulation (GDPR) Articles 12 to 21, a person in Hungary can ask a controller for access to their personal data and for its rectification, erasure, restriction or portability, or object to its processing, and the controller must answer within one month, a period it may extend by two further months for complex or numerous requests.

For processing the GDPR governs, Section 2(2) of the Information Act applies only a named set of its own provisions, so its domestic rights chapter does not reach it, but two sections of that chapter are named: Section 23 lets a person sue the controller, or a processor over its own activities, in court, with the burden on the controller to prove compliance and the court able to order the violation stopped and award damages; and Section 25 lets a person authorised by the deceased, or a close relative, exercise the rights of access, rectification, erasure, restriction and objection for five years after the person's death.

An employer may monitor an employee's conduct in connection with the employment, including by technical means, and must inform the employee in writing in advance of any technical means used. Unless otherwise agreed, an employee may use an IT device or system that the employer provides for the work only for the employment. In a check, the employer may look at employment-related data stored on a device used for the employment.

Data needed to check compliance with the restriction on use count as employment-related data. The same applies where, by agreement, the employee uses their own device for the employment.

Nemzeti Adatvedelmi es Informacioszabadsag Hatosag (NAIH), the National Authority for Data Protection and Freedom of Information, is Hungary's supervisory authority, with General Data Protection Regulation (GDPR) Article 83 fines.

Section 24(2) of the Infotorveny is a Hungarian civil-law remedy that predates and now sits alongside GDPR Article 82: a person whose personality right has been infringed may claim serelemdij (compensation for infringement of a personality right) from the controller or processor, and Section 24(5) makes joint controllers and their processors jointly and severally liable for both ordinary damages and serelemdij.

Section 24 has been in force since 1 January 2012, six years before GDPR Article 82 applied on 25 May 2018. Under Section 24(3) a controller is released from liability for damage and serelemdij if it proves that an unavoidable cause outside the scope of the processing caused the harm, and under Section 24(4) a processor is released if it proves it complied with the obligations the law places on processors and with the controller's lawful instructions.

The Infotorveny's own definitions list biometric data alongside racial or ethnic origin, political opinion, religious belief, trade-union membership, genetic data, health data, and sex-life or orientation data as a special category, matching General Data Protection Regulation (GDPR) Article 9(1).

Its biometric definition is a near-verbatim restatement of GDPR Article 4(14): "biometrikus adat: egy természetes személy fizikai, fiziológiai vagy viselkedési jellemzőire vonatkozó olyan, sajátos technikai eljárásokkal nyert személyes adat, amely lehetővé teszi vagy megerősíti a természetes személy egyedi azonosítását, mint például az arckép vagy a daktiloszkópiai adat" (English: biometric data means personal data obtained through specific technical procedures relating to the physical, physiological, or behavioural characteristics of a natural person, which enables or confirms the unique identification of that natural person, such as the facial image or dactyloscopic fingerprint data), naming the same two examples as the GDPR.

Separately, Section 11(1) of the Labour Code (Act I of 2012) lets an employer process an employee's biometric data to identify the employee only where that is necessary to prevent unauthorized access to a thing or data that would endanger the life, bodily integrity or health of the employee or others, or cause serious or mass, irreversible harm to a significant interest protected by law.

Section 11(2) names as such an interest the protection of classified data of at least the Confidential level, firearms, ammunition and explosives, toxic or dangerous chemical or biological materials, nuclear materials, and property of especially high value under the Criminal Code.

Section 423(1) makes it a misdemeanour, punishable by up to two years' imprisonment, to log into an information system without authorization by violating or circumventing a technical access-control measure, or to stay logged in beyond one's authorization.

Section 423(2) makes it a felony, punishable by up to three years, to hinder an information system's functioning or to modify, delete, or render data inaccessible without authorization, with Section 423(3)-(4) raising the term to one to five years where a significant number of systems are affected or significant harm results, and to two to eight years where the target is a public-interest facility.

Section 424 separately criminalizes making, handing over, or acquiring a password or program built to facilitate one of these offenses. Section 423's current text derives from Act LXXII of 2014, Section 86. That Act's own closing provisions bring Section 86 into force on 1 January 2015. The Criminal Code as a whole took effect on 1 July 2013. Section 423(3) was later replaced by Act LX of 2022, Section 43.

Section 35/A(1) makes it a free use to reproduce a work for the text-and-data mining it requires, provided the user has lawful access to the work, the rightsholder has not objected to the free use in advance and in an appropriate manner (for content made available online, in a machine-readable form), and any copies made for the mining are kept only as long as the mining itself needs them.

Section 35/A(2) gives research organizations and cultural heritage institutions a separate, non-waivable exception for text-and-data mining carried out for scientific research, without the opt-out that limits the general exception. The section was inserted by Act XXXVII of 2021, Section 10; that Act's own closing provisions bring the whole Act, including Section 10, into force on 1 June 2021.

Section 82/B of the Hungarian Copyright Act (Szjt.) requires the press publisher's consent before a press publication is made available to the public online, or reproduced electronically for that purpose, by an information society service provider. Section 82/C removes the need for consent for hyperlinks to a press publication, for single words or very short extracts of it, and for private or non-commercial use by individual users.

Act XXXVII of 2021 inserted these sections, and the publisher may exercise the right only for uses made on or after 1 June 2021.

Section 84/A(1) requires a database producer's consent before the whole or a substantial part of a database's contents is extracted (reproduced) or re-utilized (made available to the public).

Section 84/A(3) extends this to repeated and systematic extraction or re-utilization of even an insignificant part of the database, where that conflicts with the database's normal exploitation or unreasonably prejudices the producer's legitimate interests, which reaches a scraper that repeatedly copies small amounts over time rather than the database in one pass. Section 84/A(5) confines the right to a database whose obtaining, verification, or presentation required substantial investment.

This transposes the EU Database Directive's sui generis right. Chapter XI/A, including this section, was inserted by Act LXXVII of 2001, Section 8(2). That Act's own Section 13(1) brought the whole Act into force on 1 January 2002.

Chapter IV of the Cybersecurity Act covers national cybersecurity certification and the activity of the national cybersecurity certification authority under Regulation (EU) 2019/881, and the Act on conformity assessment bodies does not apply to them (Section 37).

A national cybersecurity certification scheme must meet eleven security objectives, which include protecting stored, transmitted or processed data across the whole life cycle of the ICT product, service or process, identifying and documenting known dependencies and vulnerabilities, and making the product secure by default and by design (Section 38). The Act entered into force on 1 January 2025 (Section 82(1)).

An investment firm engaged in algorithmic trading must have effective systems and risk controls that suit its business and ensure, in line with Chapter II of the DORA Regulation (Regulation (EU) 2022/2554), that its trading systems are resilient with sufficient capacity, are subject to trading thresholds and limits, cannot send erroneous orders and cannot be used for market abuse (Section 26/B(1)).

The firm must also have effective business continuity arrangements to deal with any failure of its trading systems, including the ICT business continuity policy and ICT response and recovery plans set up under DORA Article 11, and must see to the full testing and monitoring of its systems so that they always meet those requirements and DORA Chapters II and IV (Section 26/B(2)).

The firm must notify the Supervisory Authority and the authority of the trading venue's seat that it engages in algorithmic trading (Section 26/B(3)). The provisions in their present form were set by Act X of 2024 and took effect on 17 January 2025 (Act X of 2024, Section 75(5)).

Section 6(2) requires the head of an organization within the Act's scope to establish and operate a risk-management framework for the electronic information systems in the organization's possession, following a directly applicable EU legal act or, in its absence, the decree of the minister responsible for informatics.

Section 6(3) to (5) list the concrete tasks the framework must cover: surveying and registering every electronic information system and central service used, appointing the person responsible for system security, classifying systems into a security category, applying protection proportionate to risk, issuing and periodically reviewing an information-security policy, and, for a public-administration, state-influenced or critical-infrastructure organization, spending at least 5 percent of annual IT development costs on cybersecurity.

Section 1 scopes the duty to an essential or important organization. The sector annexes (2. and 3. melléklet) reach an organization that qualifies as a medium-sized enterprise or larger under Hungary's SME Act, or that exceeds the thresholds the Act sets for one. Section 2(1)(c) separately reaches a provider of an online marketplace, online search engine or social-media service platform whose main place of business activity is in Hungary, even where the provider is established elsewhere.

Section 66(2) of the Act requires an organization under Section 1(1)(d) or (e) to notify the national cybersecurity incident-handling centre of a threat, near-incident or cybersecurity incident causing serious disruption or damage, as specified in a government decree. Section 66(1) imposes the equivalent duty, without that materiality filter, on a public-administration, state-influenced or critical-infrastructure organization under Section 1(1)(a) to (c) or (f).

Section 77(1) of Government Decree 418/2024 sets the clock those notifications run on. It requires an initial notification without undue delay and in any case within 24 hours of becoming aware of the incident. It requires an event notification within 72 hours that updates the initial report and assesses the incident's severity and impact.

It requires a final report no later than one month after that 72-hour event notification, or, if the incident is still ongoing at that point, a report on progress so far followed by a final report within one month of its resolution. Section 42 of the same Decree makes an infringement of either Section 66 or the Decree's own notification rules punishable by an administrative cybersecurity fine on the same NIS2-mirroring tiers as the risk-management duty.

Section 6, paragraph 1 of Act XLVIII of 2008 allows advertising to be communicated to a natural person as its recipient by direct approach, in particular by electronic mail or an equivalent individual means of communication, other than as paragraph 4 provides, only if the recipient has given prior, clear and express consent, unless a separate law provides otherwise. Section 6, paragraph 3 makes the consent withdrawable at any time, free of charge and without restriction or reasons.

Section 6, paragraph 4 allows an addressed advertising mailing to be sent to a natural person without the recipient's prior and express consent if the advertiser and the advertising service provider ensure that the recipient can prohibit it at any time, free of charge and without restriction.

Section 6, paragraph 9 defines an addressed advertising mailing as a postal item that contains only advertising or business-solicitation material and is posted at the same time to at least 500 recipients with identical content apart from the recipient's name, address and data that do not change the nature of the message.

Section 6, paragraph 5 requires the advertiser, the advertising service provider and the publisher of the advertisement to keep a register of the personal data of the persons who have consented, within the scope of the consent, and allows that data to be processed only as the consent states until it is withdrawn and to be passed to a third party only with the prior consent of the person concerned.

Section 6, paragraph 6 requires that both postal and electronic mail routes be available for withdrawing consent or prohibiting the sending of advertising, in a way that clearly identifies the person making the declaration. Section 6, paragraph 7 requires advertising communicated under paragraph 1 or 4 to carry clear and conspicuous information on the address and other contact where the recipient can withdraw consent or prohibit sending.

Section 6, paragraph 8 provides that a direct approach asking for the consent under paragraph 1 may not contain advertising, other than the name and designation of the undertaking. Paragraph 4 of section 6 is in the wording of section 19, paragraph 2 of Act CIII of 2013.

Section 24, paragraph 4 provides that the National Media and Infocommunications Authority acts, as the Ektv. provides, when section 6 is breached by advertising through an information society service or electronic communications, except a voice telephone call. Section 24, paragraph 5 provides that the proceedings under the Act do not prevent an injured party from asserting a civil law claim based on a breach of the Act directly before a court.

Section 155, paragraph 4 of the Act on Electronic Communications allows data to be stored on a subscriber's or user's electronic communications terminal equipment, or stored data to be accessed there, only on the basis of the consent of the user or subscriber concerned, given after clear and complete information that also covers the purpose of the data processing. Section 50 of Act CVII of 2011 established the current wording of paragraph 4.

Section 21, paragraph 1 of Act XXV of 2023 lets a reporter make a report in writing or orally, and lets an oral report be made by telephone or another voice messaging system, or in person.

Section 21, paragraph 2 provides that where the internal reporting system uses a recorded telephone line or other recorded voice messaging system that needs the reporter's consent, the operator of the system either records the oral report in a durable and retrievable form after the data protection information has been given, or puts it in writing and gives the reporter a copy with a chance to check, correct and sign it.

Section 21, paragraph 3 requires the operator, where no recorded system under paragraph 2 is used, to put an oral report in writing and give the reporter a copy with a chance to check, correct and sign it. Section 21, paragraph 4 gives the operator the same choice, to record after the data protection information or to put the report in writing, where the reporter reports in person.

Section 21, paragraph 5 requires the operator to make complete and accurate minutes when it puts an oral report in writing. Section 54 provides that the Act takes effect on the 60th day after its promulgation.

Section 3(2) applies the rules of the Civil Code (Polgári Törvénykönyv) on liability for damage caused by breach of contract to claims for compensation under Article 54 of the Regulation.

Section 3(3) lets a service recipient bring civil proceedings against an intermediary service provider over a breach of its terms and conditions under Article 14 of the Regulation, a breach of the fundamental rights named in Article 14(4), a decision or measure under Article 16(5) or Article 17(1), and a decision on a complaint in an online platform's internal complaint-handling system.

Section 3(4) lets a consumer sue a provider established in another Member State before the court of the consumer's own residence, unless the parties agreed otherwise in accordance with Article 19 of Regulation (EU) No 1215/2012. Section 23(1) provides that the Act takes effect on 17 February 2024.

Section 3(1) requires an intermediary service provider that learns of illegal content on its service through an order under Article 9 of the Regulation, and a hosting provider established in Hungary that learns of it under Article 16 of the Regulation, to remove the content or disable access to it without undue delay.

Section 3(5) lets a service recipient start a general official supervision procedure where the terms and conditions of a provider established in Hungary, or its decision or measure under Article 16(5) or Article 17(1) of the Regulation, do not comply with the Regulation. Section 21 requires orders issued by a court or authority in the form, content and language required by Articles 9 and 10 of the Regulation to be forwarded to the President in the manner set by the President's decree. Section 23(1) provides that the Act takes effect on 17 February 2024.

Section 13(1) lets a rights holder whose copyright, related right, database right or trademark right is infringed by information a service provider has made accessible call on the provider, by a notice in a fully probative private or public document, to remove the infringing information.

Section 13(2) requires the notice to identify the subject of the infringement and the facts that make it probable, the data needed to identify the information, and the rights holder's name, address, telephone number and email address. Section 13(4) requires the provider, within 12 hours of receiving the notice and with written information to the affected user within three working days, to block access to the information or remove it and to state on whose notice the removal was made.

Section 13(6) lets the affected user object within eight days of that information, in a fully probative private or public document. Section 13(7) requires the provider on receiving the objection to make the information accessible again without delay, and to notify the rights holder by sending the objection, unless a court or authority ordered the removal.

Section 13(9) requires the provider, if the rights holder within 10 working days files for an interim injunction, a payment order or a criminal complaint, to block or remove the information again within 12 hours of receiving the court's interim measure. Section 13(12) provides that the provider is not liable for the effective execution of the removal if it acted in good faith in accordance with paragraphs 4 and 9. The Act that carries Section 13 was promulgated on 24 December 2001. Section 16(1) of the Act brings it into force on the 30th day after promulgation, which is 23 January 2002.

Section 15/D(1) of the Ekertv. requires a video-sharing platform provider, to protect users, to apply the measures and technical solutions of Section 15/F where the content it delivers to the public meets one of the conditions listed in points (a) to (d).

Point (b) covers content that violates human dignity and may incite hatred against, or violence against, a nation, community, national, ethnic, linguistic or other minority or any majority, or a religious community, or any of their members, because of belonging to it.

Point (c) covers content that may constitute a crime or a call to commit one, in particular a call to commit an act of terrorism, incitement against a community, public denial of the crimes of national socialist or communist systems, or the sharing, distribution or forwarding of child pornography. Section 15/F(1) requires the provider to secure compliance with the Section 15/D(1) requirements through appropriate measures and effective technical solutions.

Section 15/F(5) provides that the measures under paragraphs (1) and (2) may not lead to prior control measures or to a filtering of uploads that does not comply with the Act. Section 15/E(1) requires the provider to include in its general terms and conditions the cases and requirements in Section 15/D(1) and the measures and technical solutions of Section 15/F that secure them.

Section 15/G requires the provider to offer a transparent, effective and user-friendly mechanism that informs users about content that may harm minors, lets an uploader declare whether a video contains a commercial communication, lets users report or flag content that violates Section 15/D(1) or complain about it, and explains in plain terms how those declarations, reports, flags and complaints are processed and what they do.

The Hivatal supervises compliance with Sections 15/D to 15/H in the exercise of its official powers. For an infringement the Hivatal may impose a fine of up to HUF 100 million. The Hivatal may also oblige the provider to suspend its service for a period from fifteen minutes to one week. The Act applies to a video-sharing platform provider established in Hungary.

Section 1(1b) extends the Act to a video-sharing platform provider established in no Member State whose parent or subsidiary is established in Hungary, or that belongs to a group with another company established in Hungary. Section 16(5) required video-sharing platform providers to meet the obligations that Act XXIV of 2020 created within 150 days following that Act's entry into force.

Section 20/A(1) requires an internet press publisher that allows readers to comment on its press content, on the interface it edits or on an online platform operated by another, to adopt a policy on the procedure to be applied after publication against unlawful comments and to apply an effective solution in line with it. Section 20/A(1) also requires the publisher to publish the policy.

Section 20/A(2) has the Media Council (Médiatanács) publish a recommendation on the adequacy of the policies and the effectiveness of the solutions. Section 20/A(3) has the Office of the National Media and Infocommunications Authority check the adequacy of the policies and the effectiveness of the solutions in the exercise of its official powers. Section 6 of Act LXXVIII of 2024, which inserted Section 20/A, provides that the Act takes effect on 1 January 2025.

Section 1(1) applies the Act to intermediary services provided by a provider established in Hungary and to intermediary services directed at Hungary. Section 2(1) point 1 counts the decisions of the President of the National Media and Infocommunications Authority (Nemzeti Média- és Hírközlési Hatóság), called the President, among the rules on digital services.

Section 4(1) requires online platform providers established in Hungary to pay a supervisory fee of no more than 0.35 percent of their net revenue from services under the Regulation in the preceding business year. Section 4(5) exempts micro and small enterprises and providers whose net revenue from services under the Regulation does not reach HUF 100 million.

Section 9 lets the President impose an interim measure, lasting until the proceedings close but no more than 90 days, to avert the risk of serious and imminent harm to a wide range of service recipients. Section 10(3) lets anyone file a complaint with the President about a breach of the Regulation or the Act by an intermediary service provider.

Section 12(9) provides that a provider that fails to meet an obligation to supply data under Section 12(1) to (5) is fined up to 6 percent of its global annual turnover in the preceding financial year. Section 16(7) lets the President order an infringing provider to stop the infringement, order it to publish a notice or the decision on its home page, or impose a fine.

Section 16(9) caps that fine at 6 percent of the provider's global annual turnover in the preceding financial year, and the daily fine at 5 percent of its average daily global turnover or income. Section 21/A(5) caps the fine for a breach of Regulation (EU) 2019/1150 by an online intermediation service provider or online search engine provider at 6 percent of its global annual turnover in the preceding financial year. Section 23(1) provides that the Act takes effect on 17 February 2024.

Act XCII of 2025 on the amendment of private-law statutes was adopted by the National Assembly on 10 December 2025. The Act was promulgated on 16 December 2025. Section 59 of the Act replaces sections 6:550 to 6:559 of the Civil Code with new provisions. Section 60 of the Act adds sections 6:559/A and 6:559/B to chapter LXXII of the Civil Code. Section 95(6) of the Act brings sections 59 and 60, section 61(2)(e) and subtitle 15 into force on 9 December 2026.

Section 97(5) of the Act states that those provisions serve compliance with Directive (EU) 2024/2853. Section 62 of the Act adds section 55/A to Act CLXXVII of 2013, which applies the amended provisions of the Civil Code to products placed on the market or put into service after 9 December 2026. Section 6:552 as replaced counts software, electricity, digital manufacturing files and raw materials as products.

Section 6:552 also counts as a product a movable thing built into or connected with another movable thing or an immovable. Section 6:554(2) defines the manufacturer as a person that develops, makes or produces a product, has a product designed or made, presents itself as the manufacturer by putting its name, trade mark or another distinguishing sign on the product, or develops, makes or produces a product for its own use.

Section 6:550(1) makes the manufacturer of a defective product, and the producer of a defective component that was built into or connected with a product under the manufacturer's control and caused the product to fail, liable for product damage. Section 6:550(1)(c) makes the importer, the authorized representative and, failing them, the fulfilment service provider liable where the manufacturer or the component producer is established outside the European Union.

Section 6:550(4) treats as manufacturer a business that substantially modifies a product outside the manufacturer's control and then distributes it or puts it into service. Section 6:550(5) makes a distributor liable where the liable business cannot be identified and the distributor, asked by the injured person, does not within one month identify the liable business established in the European Union or its own supplier.

Section 6:550(6) applies the same rule to an online platform provider that is not itself a liable business and that meets the conditions of Article 6(3) of Regulation (EU) 2022/2065. Section 6:551 denies a manufacturer that built software into a product as a component recourse against the maker of the defective software, where that maker was a micro or small enterprise when the component was put into circulation and the manufacturer waived recourse in the contract.

Section 6:553(a) covers damage from a person's death, bodily injury, damage to health or medically recognized injury to mental health. Section 6:553(b) covers damage a defective product causes to other things, except damage to things used exclusively for professional purposes and damage to a product caused by a defective component that the manufacturer built into or connected with it or that is under the manufacturer's control.

Section 6:553(c) covers damage a defective product causes to data not used for professional purposes. Section 6:555(1) makes a product defective if it does not provide the safety that can generally be expected or the safety required by Union law or by legislation. Section 6:555(2) requires the examination of a defect to take into account the effect on the product of any ability to keep learning or to acquire new features after it is put into circulation or into service.

Section 6:555(2) also requires that examination to take into account the relevant product safety requirements, including safety-relevant cybersecurity requirements. Section 6:555(3) provides that a product is not defective only because a better product, including an update or upgrade of the product, has been or is later placed on the market. Section 6:555(4) puts on the injured person the burden of proving the defect, the damage, its extent and the causal link between defect and damage.

Section 6:556(1)(a) presumes the product defective until the contrary is proved where the liable business does not make relevant evidence available to the injured person at the court's request. Section 6:556(1)(b) also presumes the defect where the injured person proves that the product does not meet product safety requirements.

Section 6:556(2) presumes the causal link between defect and damage, until the contrary is proved, where the product is found defective and the damage is of a kind typically linked to the defect found. Section 6:557(2)(c) releases a liable business that proves the defect could not be recognized, according to the objective state of scientific and technical knowledge, when the product was put into circulation or while it was under the manufacturer's control.

Section 6:557(5) denies the release in paragraph (2)(a) where the defect relates to a related service, to software including updates or upgrades, to the lack of software updates or upgrades needed to maintain safety, or to a substantial modification, in each case under the manufacturer's control. Section 6:558 denies release on the ground that a third party's conduct also contributed to the damage.

Section 6:559 makes void any limitation or exclusion of the liable business's liability towards the injured person. Section 6:559/A(1) gives the injured person three years to assert a claim for damages. Section 6:559/A(3) ends the liability of a liable business under the chapter after ten years, unless the injured person has meanwhile started proceedings against another liable business that can be held responsible.

Section 6:559/A(5) ends the injured person's entitlement to compensation after twenty-five years where a latent personal injury prevented the injured person from starting proceedings within ten years. Section 6:559/B(2)(b) disapplies the chapter to free and open-source software developed or made available in the course of a non-commercial activity. Section 6:559/B(3) defines making available on the market to include supply free of charge.

Section 6:550 makes the producer of a defective product liable for damage the product causes. Section 6:551 defines a product as every movable thing, even where it later became a component of another thing. Section 6:552 covers damage that results from a person's death, bodily injury or damage to health.

Section 6:552 also covers damage a defective product causes to other things above the forint equivalent of EUR 500 at the official Magyar Nemzeti Bank rate, where the damaged thing is ordinarily meant for private use or consumption and the injured person used it that way. Section 6:553(1) counts as producer the maker of the end product, a part or the raw material, and anyone who presents itself as producer by putting its name, trade mark or another distinguishing sign on the product.

Section 6:553(2) also treats as producer the person who brings an imported product into the European Economic Area in the course of its economic activity. Section 6:553(3) treats every distributor as the producer where the producer cannot be identified, until the distributor names the producer or the distributor it obtained the product from. Section 6:553(4) lets the distributor make that statement within thirty days of the injured person's written request.

Section 6:554(1) makes a product defective if it does not provide the safety that can generally be expected, having regard in particular to its purpose, reasonably expected use, the information given about it, the time it was put into circulation and the state of science and technology. Section 6:554(2) provides that a product is not defective only because a product offering greater safety is later placed on the market.

Section 6:554(3) puts the burden of proving the defect on the injured person. Section 6:555(1)(a) releases the producer where it proves that it did not put the product into circulation. Section 6:555(1)(b) also releases the producer where it proves that it did not make the product for commercial distribution or in the course of a commercial economic activity.

Section 6:555(1)(c) also releases the producer where it proves that the product was free of defect when it put it into circulation and that the cause of the defect arose later. Section 6:555(1)(d) also releases the producer where it proves that the defect could not be recognized according to the state of science and technology when it put the product into circulation.

Section 6:555(1)(e) also releases the producer where it proves that applying a law or a binding regulatory requirement caused the defect. Section 6:555(2) releases the producer of a raw material or a part where it proves that the structure or composition of the end product caused the defect or that the end producer's instruction did. Section 6:555(3) bars a producer from relying on the state of science and technology where a medicine used as prescribed caused the damage.

Section 6:556 denies the producer release on the ground that a third party's conduct also contributed to the damage. Section 6:557 makes void any limitation or exclusion of the producer's liability towards the injured person. Section 6:558(1) gives the injured person three years to assert a claim for damages. Section 6:558(2) starts that period when the injured person learned or could have learned of the damage, the defect and the producer's identity.

Section 6:558(3) limits the producer's liability under the chapter to ten years from the day it put the product into circulation, and a missed deadline extinguishes the right. Section 6:559(1) allows no award below the full damage even in circumstances that deserve particular leniency. Section 6:559(2) disapplies the chapter to damage defined in the atomic energy act and to damage from nuclear accidents that international conventions ratified by Hungary regulate.

Section 5:14(1) of the Civil Code, headed 'A dolog' (the thing), provides that a possessable corporeal object can be the object of ownership. Section 5:14(2) applies the rules on things also to money, securities and natural forces utilized in the manner of a thing. Section 8:6(1)(a) states that the Civil Code serves compliance with Council Directive 85/374/EEC and Directive 1999/34/EC.

Section 55/A of Act CLXXVII of 2013, as inserted by Act XCII of 2025, applies the amended provisions of the Civil Code to products placed on the market or put into service after 9 December 2026. The Civil Code entered into force on 15 March 2014.

Section 1(1) of the Accessibility Act applies the Act to the manufacture and distribution by economic operators of consumer general-purpose computer hardware systems and their operating systems, self-service terminals including payment terminals and the self-service terminals used for the services in section 1(2), consumer terminal equipment with interactive computing capability used for electronic communications services, consumer terminal equipment with interactive computing capability used for access to audiovisual media services, and e-readers.

Section 2 point 19 defines an economic operator as a manufacturer, authorised representative, importer, distributor or service provider. Section 3(1) allows an economic operator to place a product on the market only if it meets the accessibility requirements of Annex 1 to the Act. Section 7 refers the obligations of economic operators for the accessibility requirements of products to the Market Surveillance Act.

Point 1.1 of Annex 1 requires products to be designed and produced so that people with disabilities can use them to the greatest extent foreseeable. Point 1.3 of Annex 1 requires a product, including its user interface, to have features, elements and functions that let people with disabilities access, perceive, operate, understand and control it.

Point 1.4 of Annex 1 requires support services, where they are available, to give information on the accessibility of the product and its compatibility with assistive technologies through accessible means of communication. Point 1.3.15.1 of Annex 1 requires self-service terminals to have text-to-speech technology and to let the user use their own headset.

Point 1.3.15.1 also requires self-service terminals to warn the user through more than one sensory channel when a timed response is needed, to allow the time to be extended, to have contrasting and tactile keys and controls where they have them, to be usable without first activating an accessibility feature, and, where they have audio, to be compatible with hearing technologies. Point 1.3.15.2 of Annex 1 requires e-readers to have text-to-speech technology.

Point 1.3.15.3 of Annex 1 requires consumer terminal equipment used for electronic communications services to handle real-time text, to support high-fidelity audio and total conversation where it has video, to connect wirelessly with hearing technologies and to avoid interfering with assistive devices.

Point 1.3.15.4 of Annex 1 requires consumer terminal equipment used for access to audiovisual media services to make accessible to people with disabilities the elements that the audiovisual media service provider supplies for accessible user access, selection, control, personalisation and transmission with assistive devices.

Point 7.1 of Annex 1 requires any function of a product or service that points 1 to 6 do not address to be made accessible by meeting the relevant functional performance criteria, which point 7.2 lists, among them at least one mode of use that does not require vision, one that does not require hearing and one that does not require speech. Point 2 of Annex 1 requires the packaging and the instructions for use of the products it covers, other than self-service terminals, to be made accessible.

Section 5(4) exempts a micro-enterprise that deals in products from preparing the written assessment of the fundamental alteration and disproportionate burden conditions. Section 5(4) requires a micro-enterprise, when the supervising authority asks, to hand over the data and information relevant to the assessment.

Sections 5(3), (4) and (7) bind every economic operator that relies on the fundamental alteration or disproportionate burden condition, so an importer or distributor that relies on it for a product must inform the supervising authority, prepare the written assessment and keep it.

Point 2 of Annex 1 to the Market Surveillance Act requires the technical documentation, where the manufacturer applied section 5 of the Accessibility Act, to demonstrate that the accessibility requirements concerned would fundamentally alter the product or impose a disproportionate burden.

Section 14/B(1) of the Market Surveillance Act requires manufacturers to ensure, when they place their products on the market, that the products were designed and produced to the applicable accessibility requirements of the Accessibility Act.

Section 14/B(2) requires manufacturers to draw up the technical documentation, to carry out or have carried out the conformity assessment procedure of Annex 1 of the Market Surveillance Act and, once conformity is shown, to draw up the EU declaration of conformity and affix the CE marking.

Section 14/B(3) and (4) require manufacturers to keep the technical documentation and the EU declaration of conformity for five years after the product is placed on the market and to keep procedures in place that maintain the conformity of series production.

Section 14/B(8) requires a manufacturer that judges, or has reason to suppose, that a product it placed on the market does not meet the Accessibility Act to take corrective measures without delay, to inform the competent national authorities of the Member States where it distributed the product, and to keep a register of non-conforming products and related complaints.

Section 14/C provides that a manufacturer may appoint an authorised representative by written mandate, and the manufacturer's design duty and the technical documentation are not part of the mandate. Section 14/C(2) requires the mandate to let the authorised representative keep the EU declaration of conformity and the technical documentation for five years for the market surveillance authorities, hand over the information a competent authority asks for, and cooperate with it.

Section 14/D(1) and (2) allows an importer to place only conforming products on the market and requires it, before placing a product on the market, to be satisfied that the manufacturer carried out the conformity assessment and drew up the technical documentation, that the product carries the CE marking and that the required documentation accompanies it.

Section 14/D(3) bars an importer that judges, or has reason to suppose, that a product does not meet the accessibility requirements from placing it on the market until conformity is ensured, and requires it to inform the manufacturer and the market surveillance authorities of a non-conforming product.

Section 14/D(4) and (5) require an importer to mark its name and contact address on the product, its packaging or its accompanying document, and to see that instructions for use and safety information in Hungarian accompany the product. Section 14/D(6) requires an importer to ensure that, while it is responsible for a product, storage and transport conditions do not jeopardise its conformity with the accessibility requirements.

Section 14/D(7) requires an importer to keep a copy of the EU declaration of conformity available to the market surveillance authorities for five years and to ensure that the technical documentation can be made available to them on request.

Section 14/D(8) requires an importer that judges, or has reason to suppose, that a product it placed on the market does not meet the Accessibility Act to take corrective measures without delay, to inform the competent national authorities of the Member States where it distributed the product, and to keep a register of non-conforming products and complaints.

Section 14/D(9) requires an importer to hand over to a competent national authority, on its reasoned request, all the information and documentation needed to establish the conformity of the product and to cooperate with it.

Section 14/E(1) to (3) requires a distributor to act with due care in relation to the requirements of the Accessibility Act, to check before distributing a product that it carries the CE marking and is accompanied by the required documentation and instructions in Hungarian, and not to distribute a product it judges, or has reason to suppose, to be non-conforming until conformity is ensured.

Section 14/E(3) also requires a distributor to inform the manufacturer or importer and the market surveillance authorities of a product that does not meet the accessibility requirements. Section 14/E(4) places the same storage and transport duty on a distributor.

Section 14/E(5) and (6) require a distributor that judges, or has reason to suppose, that a product does not meet the Accessibility Act to see that corrective measures are taken, to inform the competent national authorities, and to hand over documentation and cooperate when the market surveillance authority asks.

Section 14/B(5) to (7) require a manufacturer to mark each product with a type, batch or serial number, to mark the product with its name and contact address, and to supply instructions for use and safety information in Hungarian. Section 14/B(9) requires a manufacturer to hand over to a market surveillance authority, on its reasoned request, all the information and documentation needed to show conformity and to cooperate with it.

Section 14/F treats an importer or distributor as a manufacturer, with the manufacturer's duties of section 14/B, where it places a product on the market under its own name or trademark or modifies a product already on the market in a way that may affect conformity.

Section 14/G requires manufacturers, representatives, importers and distributors to identify to the market surveillance authorities, on request, the operators that supplied them with a product and the operators they supplied, for five years. Section 6/A(4) makes the manufacturer, by drawing up the EU declaration of conformity, take responsibility for the product's compliance with the Accessibility Act.

Section 6/A(7) requires the CE marking to be affixed before the product is placed on the market. Section 6/A(1) provides that the EU declaration of conformity states that the applicable accessibility requirements are shown to be met, and where section 5 of the Accessibility Act is used it must name the accessibility requirements to which the exception applies.

Section 15(9) of the Market Surveillance Act lets the market surveillance authority, where a product does not meet the requirements, require warnings, restrict or prohibit the placing on the market, order withdrawal or recall, require the operator to remedy the defects within a time limit, restrict or prohibit distribution until lawful conditions are restored, and impose a fine.

Section 16(1) of the Market Surveillance Act requires the authority, in setting a fine, to take into account whether the operator infringed the same provisions within three years.

Section 16(2) of the Market Surveillance Act sets the fine for an operator with annual net turnover above 100 million forints that is not a small or medium-sized enterprise at 1 million forints up to 5% of annual net turnover and at most 650 million forints, and at 2 million up to 3 billion forints where the infringement harms or endangers the life, physical integrity or health of consumers or users.

Section 16(2)(b) sets the fine for any other operator at 100,000 forints to 2 million forints, and at 200,000 forints up to 5% of annual net turnover, or 6.5 million forints for an enterprise outside the Accounting Act, where the infringement harms or endangers the life, physical integrity or health of consumers or users.

Government Decree 605/2022 designates the NMHH Office as supervising authority for the consumer computer hardware systems and operating systems, the consumer terminal equipment used for electronic communications services and the consumer terminal equipment used for access to audiovisual media services. The Decree designates the consumer protection authority for payment terminals and for e-readers.

Section 1(3) of the Decree makes the Hungarian National Bank the supervising authority for the payment terminals used to accept payment operations and for cash dispensers. Section 39(5) of the Act on the Hungarian National Bank, which section 6 of Act XLVII of 2025 inserted from 19 June 2025, has the Bank act as supervising authority under the Accessibility Act for payment terminals used to accept payment operations and for cash dispensers.

The Decree designates the aviation authority, the bus market surveillance and passenger rights authority, the railway administrative body and the shipping authority as supervising authorities for the other self-service terminals tied to the matching passenger transport services. Section 1(2) of the Decree designates the railway administrative body instead for integrated and linked passenger public transport services as defined in Act XLI of 2012.

Section 39(1a) of the Market Surveillance Act states that it serves compliance with Articles 7 to 11, 16 to 20, 22 and 30 of the Directive. Act LXI of 2022 inserted Chapter III/A of the Market Surveillance Act, and those provisions apply from 28 June 2025.

Section 1(2) of the Accessibility Act applies the Act to electronic communications services other than machine-to-machine transmission services, to services that give access to audiovisual media services, to elements of air, bus, rail and waterborne passenger transport services, to consumer banking services, to e-books and dedicated software, and to e-commerce services that economic operators provide to consumers.

For passenger transport, section 1(2)(c) covers websites, mobile-device-based services including mobile applications, electronic tickets and electronic ticketing services, passenger information including real-time travel information, and the services that interactive self-service terminals provide, and for urban, suburban and regional transport only the services that interactive self-service terminals provide.

Section 1(3) excludes online maps and mapping services, provided that the essential information for navigation maps is available in accessible digital form, and excludes content of websites and mobile applications that belongs to a third party and that the economic operator did not fund, develop or control. Section 3(1) allows an economic operator to provide a service only if it meets the accessibility requirements of Annex 1 to the Act.

Article 4(1) of the Directive requires the Member States to ensure that economic operators only place products on the market and only provide services that comply with the accessibility requirements of its Annex I. Section 3(3) exempts a micro-enterprise that provides services from the requirements of points 3 and 4 of Annex 1 and from the Act's duties on compliance with the accessibility requirements.

Section 3(2) requires an economic operator to ensure the continuous training of its employees so that accessible products and services are provided. The training also covers information, advice and advertising activities. Section 3(4) requires the provider to ensure compliance with the accessibility requirements also where a third party provides the service or part of it as a subcontractor.

Section 3(5) leaves the accessibility requirements for the built environment that service users use to the Government decree on national town-planning and building requirements. Section 138 of Government Decree 280/2024 repealed Government Decree 253/1997 on national town-planning and building requirements from 1 January 2025.

Article 4(4) of the Directive allows the Member States to decide, in the light of national conditions, that the built environment used by clients of the services it covers must comply with the accessibility requirements of its Annex III. Section 4(1) presumes that products and services that meet harmonised standards, or parts of them, whose references are published in the Official Journal of the European Union, meet the accessibility requirements that those standards or parts cover.

Section 4(2) gives the same presumption to products and services that meet the technical specifications that the European Commission publishes by implementing act where no harmonised standard exists.

Section 4(3) treats passenger transport services that meet the accessible-information requirements of the EU passenger rights regulations and of the rail interoperability rules as meeting the accessibility requirements, and section 4(4) requires any additional requirement of the Act to be met in full.

Section 4(5) presumes that a product or service whose features, elements and functions meet the accessibility requirements as point 6 of Annex 1 sets out fulfils, for those features, elements and functions, the accessibility obligations of other European Union acts and of the laws that implement them, unless those acts provide otherwise.

Section 5(1) applies the accessibility requirements only to the extent that compliance does not require a significant modification that fundamentally alters the essential characteristics of the service and does not impose a disproportionate burden on the economic operator. Section 5(2) bars an economic operator that receives funding from a source other than its own to improve accessibility from relying on the disproportionate burden condition.

Section 5(3) requires an economic operator that relies on section 5(1) to inform the supervising authority and the competent authorities of the other Member States where it provides the service, and a micro-enterprise need not do so. Section 5(4) requires the economic operator to prepare a written assessment, with the reasons set out in detail, of whether section 5(1) applies, and the criteria of Annex 2 govern that assessment.

Section 5(5) limits the duty of a provider whose self-service terminals cannot all meet the requirements without a disproportionate burden to the extent that does not impose that burden. Section 5(6) requires the provider to review the assessment when the service changes and when the supervising authority asks, and at least every five years.

Section 5(7) requires the economic operator to keep the assessment for five years from the last provision of the service and to give the authority a copy on request. Section 6(1) requires a service provider to assess and document, in line with Annex 3, how its service meets the accessibility requirements, to publish the documentation in written and oral form in a manner accessible to people with disabilities, and to keep it for as long as it provides the service.

Point 1 of Annex 3 requires the service provider to set out that information in its general terms and conditions or an equivalent document, with at least a general description of the service in an accessible format, the descriptions needed to understand how the service works, and an account of how it meets the accessibility requirements.

Section 6(2) requires the provider to ensure that the service continuously meets the requirements and to monitor changes in the service, in the requirements and in the harmonised standards or technical specifications that apply to it.

Section 6(3) and (4) require a provider that judges, or has reason to suppose, that its service does not meet the requirements to take corrective measures without delay and to inform the supervising authority, and the competent authorities of the other Member States where it provides the service, giving details of the non-compliance and the measures taken.

Section 6(5) and (6) require the provider, when the supervising authority asks, to hand over the information and documentation needed to show that the service meets the requirements and to cooperate with the authority. Section 11 applies the Act to the products placed on the market and the services provided after it took effect, including used products imported from third countries.

Section 12(1) excludes from the Act the pre-recorded time-based media that websites and mobile applications published before it took effect, the office file formats published before it took effect, and the archive content that is no longer updated or edited after it took effect. Section 12(2) leaves service contracts concluded before the Act took effect, and not meeting its requirements, unaffected until they expire but no later than 28 June 2030.

Section 12(3) lets self-service terminals that providers lawfully used before the Act took effect remain in use to the end of their economically useful life but for no more than 20 years after they entered use. Section 12(4) lets providers continue until 28 June 2030 to provide services with products that do not meet the Act and that they lawfully used before that day to provide similar services.

Article 32(1) of the Directive requires the Member States to provide a transitional period ending on 28 June 2030 for services provided with products lawfully used before that date. Section 8(3) lets the supervising authority call on a non-compliant economic operator to comply in a decision that contains a warning and open a consultation on the time within which the operator will remedy the deficiencies.

Section 8(4) requires the supervising authority to impose an administrative fine on an operator that does not cooperate in that consultation or does not meet the accessibility requirements within the time set. Section 8(6) lets a consumer start proceedings before the supervising authority or a court so that the accessibility requirements are enforced.

Section 8(7) gives consumer-protection associations and associations of people with disabilities the rights of a party in proceedings that a consumer starts before the supervising authority, and lets them start proceedings before it where an infringement of the accessibility requirements, or its direct threat, affects a larger group of consumers that cannot be precisely identified.

Section 8(8) lets those associations bring a public-interest action and intervene in a consumer's court action on the consumer's side. Section 3 of the Decree requires an application to the supervising authority to name the economic operator concerned, to state the place of the suspected infringement and to describe the infringement. Section 2(1) of the Decree gives competence to the supervising authority for the place where the product was bought or the service provided.

Section 8(10) requires the supervising authority to suspend its proceedings until the final court decision where proceedings on the same infringement start before a court. Government Decree 605/2022 designates the NMHH as supervising authority for electronic communications services and for services that give access to audiovisual media services.

The Decree designates the aviation authority, the bus market surveillance and passenger rights authority, the railway administrative body and the shipping authority as supervising authorities for the matching passenger transport services. Section 1(2) of the Decree designates the railway administrative body instead for integrated and linked passenger public transport services as defined in Act XLI of 2012.

The Decree designates the consumer protection authority as supervising authority for e-commerce services and for e-books and dedicated software. Section 1(3) of the Decree makes the Hungarian National Bank the supervising authority for consumer banking services, acting under the legal provisions that govern it. Section 39(5) of the Act on the Hungarian National Bank has the Bank act as supervising authority under the Accessibility Act for consumer banking services whose provision it supervises.

Section 6 of Act XLVII of 2025 inserted section 39(5) of the Act on the Hungarian National Bank. Section 6 of Act XLVII of 2025 took effect on 19 June 2025. Until Decree 288/2025 amended it, section 1(1)(f) of Decree 605/2022 designated the consumer protection authority for consumer banking services as well as for e-books, dedicated software and e-commerce services.

Section 7 of the Decree requires an economic operator that the supervising authority warns under section 8(3) of the Act to inform the authority without delay of the corrective measures it takes.

Section 8 of the Decree has the supervising authority set the amount of a fine taking into account, beyond the general criteria for administrative sanctions, the consumer interests affected, the range of products and services concerned, and the measures the operator took to reduce or make good the loss consumers suffered.

Section 5(1) of the Decree requires the supervising authority to publish a notice of each final decision and of each administrative contract it concludes, without natural-person identifiers. Section 5(3) of the Decree requires the authority to remove the notice from its website six months after publication.

Section 4 of the Decree lets the supervising authority conclude an administrative contract instead of a decision with an operator that undertakes to stop the infringement and to bring its conduct into line with the accessibility requirements. Section 1(3a) of the Act excludes procurement and concession award procedures from the enforcement subtitle. Section 30 of Act CXIX of 2025 inserted section 1(3a) of the Accessibility Act.

Section 31 of Act CXIX of 2025 inserted section 6(6) of the Accessibility Act. The subtitle of Act CXIX of 2025 that amends the Accessibility Act applies from 1 January 2026.

Point 7.1 of Annex 1 requires any function of a product or service that points 1 to 6 do not address to be made accessible by meeting the relevant functional performance criteria, which point 7.2 lists, among them at least one mode of use that does not require vision, one that does not require hearing and one that does not require speech. Point 3.1 of Annex 1 requires the products used in providing the service to be made accessible.

Point 3.3 of Annex 1 requires websites, including related online applications, and mobile-device-based services, including mobile applications, to be made accessible in a consistent and adequate way by making them perceivable, operable, understandable and robust.

Point 3.2 of Annex 1 requires information about how the service works and about its accessibility features to be made available through more than one sensory channel, in an understandable way and with an alternative for non-text content. Point 3.4 of Annex 1 requires support services, where they are available, to give information on the accessibility of the service and its compatibility with assistive technologies through accessible means of communication.

Points 4.1.1 and 4.1.2 of Annex 1 require electronic communications services to provide real-time text in addition to voice and, where video is used, total conversation. Point 4.2 of Annex 1 requires services that give access to audiovisual media services to provide perceivable, operable and understandable electronic programme guides and to pass on subtitles, audio description, spoken subtitles and sign language interpretation completely and in step with sound and video.

Point 4.3 of Annex 1 requires air, bus, rail and waterborne passenger transport services to give information on the accessibility of vehicles, infrastructure and the built environment and on the assistance available to people with disabilities, and on smart ticketing, real-time passenger information and further service information.

Point 4.5 of Annex 1 requires consumer banking services to provide perceivable, operable, understandable and robust identification methods, electronic signatures, security and payment services and to give information that does not exceed level B2 of the Common European Framework of Reference for Languages.

Point 4.6 of Annex 1 requires e-books to keep text and audio in step, to keep their digital files from obstructing assistive technologies, to make content navigable and presentable in a flexible way, and to carry accessibility information as metadata. Point 4.6.6 of Annex 1 requires e-book providers to ensure that digital rights management measures do not block accessibility features.

Point 4.7 of Annex 1 requires e-commerce services to give information on the accessibility of the products and services sold where the responsible economic operator provides it, to make identification, security and payment functions accessible, and to provide perceivable, operable, understandable and robust identification methods, electronic signatures and payment services.

Decree 288/2025 amended section 1 of Decree 605/2022 and inserted section 5/A. The amendments of Decree 288/2025 to Decree 605/2022 took effect on the day after the promulgation of Decree 288/2025.

Section 1(4) of the Accessibility Act applies its provisions also to emergency calls received on the single European emergency number 112. Point 4.1.3 of Annex 1 requires an electronic communications provider to synchronise emergency calls that use voice and text, including real-time text, and emergency calls that also use video as a total conversation, and to pass them to the competent emergency service station.

Point 4.1 of Annex 1 extends its requirements for electronic communications services to emergency calls from 28 June 2027. Section 12(5) applies section 1(4), point 4.1.3 of Annex 1 and point 5 of Annex 1 from 28 June 2027.

Point (a)(iii) of Section IV of Annex I to the Directive requires emergency communications using voice and text, including real-time text, to be synchronised, also as total conversation where video is provided, and to be transmitted by the electronic communications service providers to the most appropriate PSAP.

Article 4(3) of the Directive requires all services to comply with the accessibility requirements of Section IV of Annex I. Section 3(3) exempts a micro-enterprise that provides services from the requirements of point 4 of Annex 1. Section 1(1)(d) of Government Decree 605/2022 designates the NMHH as supervising authority for electronic communications services.

Section 8(4) of the Act requires the supervising authority to impose an administrative fine on an operator that does not cooperate in the consultation on remedying a non-compliance or does not meet the accessibility requirements within the time set. Section 43 of Act XXXIV of 2025 inserted section 12(5) of the Accessibility Act. Section 44 of Act XXXIV of 2025 amended the wording of point 4.1 of Annex 1.

Subtitle 14 of Act XXXIV of 2025, which concerns the entry into force of the Accessibility Act with different wording, applies from 28 June 2025.

Section 39(1) of the Media Act requires the media service provider of an audiovisual media service to endeavour to make its programmes continuously and progressively more accessible to people with disabilities.

Section 39(2) requires a national audiovisual media service provider whose audience share in the previous calendar year passes the statutory threshold to ensure that all its programmes, apart from television shopping windows, advertising and trailers, are available with Hungarian subtitles or with sign language interpretation.

Section 39(2a) requires the public service or significant market power audiovisual media service provider, for its media service with the highest average audience share, to make domestically produced films shown between 18:30 and 21:30 accessible to visually impaired viewers. Section 39(3) excludes programmes made available in their original language from the duty in section 39(2), except those published under section 99(2).

Section 39(4) sets the duty concerning the hearing impaired at no less than ten hours of daily programme time from 2014. Section 39(5) requires the media service provider to subtitle, sign-interpret or make accessible for visually impaired viewers a programme, or a dramaturgically connected series of programmes, throughout its whole duration once it has made it accessible in that form.

Section 39(6) requires the media service to indicate before a subtitled programme that it is also available in that form on the related teletext service, and lets the subtitles carry an abridged summary of what is said where their length would otherwise make it impossible to follow.

Section 39(6) also requires the subtitled text to be accurate and in step with the events on screen, and requires a pictogram and a spoken announcement before a subtitled, sign-interpreted or visually-impaired-accessible programme to say that it is available in that form. Section 39(7) requires subtitling of programmes that are not published from a recording to be accurate and in step with the events on screen in a reasonably expected way.

Section 39(8) requires a programme distributor to pass on the teletext signal or other subtitling that the audiovisual media service provider supplies, in step with the picture and sound, on every transmission system, network or distribution platform. Section 39(9) requires the media service provider of an audiovisual media service to prepare an action plan on accessibility measures and to report on the measures taken on the call of the NMHH.

Section 39(10) requires the NMHH to provide on its website an online contact point, easily accessible to people with disabilities, for complaints and information on accessibility. Section 184(1)(c)(cc) gives the Office of the NMHH the supervision of the rules on programmes made accessible to people with disabilities in section 39.

Section 187(4) lets the Media Council and the Office impose an administrative fine, which may be 200 million forints for a significant market power media service provider, 50 million forints for any other media service provider and 5 million forints for a programme distributor. Section 187(1) lets the Media Council and the Office fine the executive officer of the infringing organisation up to 2 million forints on a repeated infringement.

Section 187(3) lets them also exclude the infringer from the Fund's tenders for a set time, order publication of a notice or the decision, and suspend the exercise of the media service right for set periods. Section 187(7) applies the measures of section 187(3)(a) to (c) and the fine of section 187(4) to the provider of an on-demand or ancillary media service.

Section 187(3)(d) lets them delete a linear media service from the register, or terminate its administrative contract with immediate effect, after a repeated serious infringement. Section 187(5) treats an infringement as repeated where the infringer repeats, within 365 days, the conduct a final decision found unlawful, on the same legal basis and provision and in the same subject, minor infringements excepted.

Section 186 limits the response to a minor first infringement to a finding, a warning and an order to stop the conduct within no more than thirty days. Section 204(1) of the Media Act brought the Act into force on 1 January 2011. In that first text, section 39(1) required the media service provider of an audiovisual media service to endeavour to make its programmes progressively accessible to people with hearing impairments.

Section 39 takes its text from section 4 of Act CVII of 2014, as later amended. Act LXIII of 2019 inserted section 39(2a), and Act LXXVI of 2020 set its present text. Act LXXVI of 2020 rewrote section 39(2), (2a), (4), (5), (6) and (9).

Article 7(1) of Directive 2010/13/EU, as replaced by Directive (EU) 2018/1808, requires the Member States to ensure that services provided by media service providers under their jurisdiction are made continuously and progressively more accessible to persons with disabilities through proportionate measures. Article 7(3) of that Directive requires the Member States to encourage media service providers to develop accessibility action plans. Section 50 of Act LXXVI of 2020 took effect on 20 September 2020.

Article 24(1) of the Directive makes the accessibility requirements of its Annex I mandatory accessibility requirements within the meaning of Article 42(1) of Directive 2014/24/EU and Article 60(1) of Directive 2014/25/EU. Section 47(1) of Government Decree 321/2015 requires the technical specification of a public procurement to be set with regard to equal access to the services for all users and, where it fits the object of the procurement, for people with disabilities.

Section 47(2) requires the technical specification, for any object of procurement intended for use by natural persons, to take account, except in justified cases, of accessibility for people with disabilities and of design for all users, in line with the principles of universal design in Article 2 of the Convention on the Rights of Persons with Disabilities.

Section 47(3) requires the technical specification to refer to a European Union legislative act that adopts mandatory accessibility requirements, so far as it concerns accessibility for people with disabilities or design for all users. Section 47(4) requires the technical specification for an object of procurement within the Accessibility Act to be set in compliance with the accessibility requirements that Act lays down.

Section 6 of Government Decree 317/2022 inserted section 47(4) into Decree 321/2015. Government Decree 317/2022 states that it serves compliance with Directive (EU) 2019/882. Section 6 of Decree 317/2022 applies from 28 June 2025. Section 50(1) applies Decree 321/2015 to the procurements started after it took effect.

Section 15/D(1) of the e-commerce act makes a video-sharing platform provider apply the measures and technical solutions of Section 15/F where content is capable of harming the physical, mental, spiritual or moral development of minors. Under Section 15/F(2), the provider must provide effective age verification and a parental control system under the user's supervision.

Under Section 15/F(3), age verification and the parental control system are effective only if they rest on checking the real age of the platform's users and can actually ensure that minors do not normally hear or see the harmful content. Section 15/F(4) requires the strictest access restriction for the most harmful content.

Section 15/F(6) bars processing the personal data of minors collected or generated to apply these measures for commercial purposes such as direct marketing, profiling and behavior-based targeted advertising. The Office of the National Media and Infocommunications Authority supervises compliance with Sections 15/D to 15/H in the exercise of its official powers. Act XXIV of 2020, which inserted these provisions, took effect on 12 June 2020. Providers were required to meet the obligations that Act created within 150 days following its entry into force.

Section 4/A(1) provides that information published by a service provider, other than media content covered by the Press Freedom Act, that could seriously harm a minor's intellectual, spiritual, moral, or physical development, in particular by having violence or the direct, naturalistic depiction of sexuality as a defining element, may be published only together with a warning notice about the possible endangerment of minors, displayed before the content, and identifiers in the page's source code that indicate the content's category and are recognizable by filter software as defined in the Electronic Communications Act.

A Child Protection Internet Roundtable monitors how that provision is applied, and anyone may report a presumed breach to it. The Electronic Communications Act separately requires an internet-access provider to compile and publish information about the availability of easily installable minor-protection software and to notify subscribers of it quarterly.

Section 9(1) requires a media service provider to sort every programme it intends to publish, other than a fixed list of exceptions such as news, political information, sports, and trailer programmes, into one of the age-rating categories the section defines before it is broadcast; Section 9(2) puts a programme viewable regardless of age into category I. Section 11(1) requires an on-demand audiovisual media service to publish a programme only in the manner its category permits, and Section 11(1a) requires the age-rating category to be displayed prominently when a programme is presented in the service's catalogue or before the user views it.

Section 11(1c) exempts an on-demand provider that the Media Council's recommendation treats as having low revenue or a small audience from the display duties in Section 11(1a) and (1b).

Section 9(6) requires a programme that may adversely affect the development of minors, in particular because its defining element is violence, the promotion or portrayal of deviation from the self-identity corresponding to the sex assigned at birth, of gender reassignment or of homosexuality, or the direct, naturalistic or gratuitous portrayal of sexuality, to be sorted into Category V, which carries the rating not recommended for persons under the age of eighteen.

In a linear media service, Section 10(1)(d) lets a Category V programme be published, with an appropriate signal, only between 22:00 and 05:00.

By judgment of 21 April 2026 in Case C-769/22, European Commission v Hungary, the Court of Justice declared that, by introducing Section 9(6) and adopting Section 32(4a) of this Act, Hungary failed to fulfil its obligations under Article 6a(1) of the Audiovisual Media Services Directive and Articles 1, 7, 11 and 21 of the Charter of Fundamental Rights of the European Union.

The Court found that Section 9(6), read with Section 10(1)(d), and Section 32(4a) make a distinction directly based on sex and sexual orientation, which Article 21(1) of the Charter prohibits in principle. Section 9(1) was established by Act LXXIX of 2021, Section 9, and further modified by Act LXI of 2022, Section 27; Section 11(1a)-(1b) was inserted by Act LXI of 2022, Section 23.

Act LXXIX of 2021's own closing provisions set general commencement at the fifteenth day after promulgation, and that Act was promulgated on 23 June 2021; Act LXI of 2022's own closing provisions set general commencement, for the section establishing Section 11(1) and (1a), at the eighth day after promulgation, and that Act was promulgated on 19 December 2022. The sections this entry groups came into force on different days.

Act LXI of 2022 separately states that its own Section 27, which later amended the already-effective Section 9(1), took effect on 1 July 2024.

Section 82/A defines a press publication as a periodic or regularly updated publication, consisting mainly of journalistic literary works, published under a single title for the purpose of informing the public about news or other topics, on a service provider's initiative, editorial responsibility, and control; a periodical published for scientific purposes does not qualify.

Section 82/B(1) requires the press publication's publisher's consent before it is made available to the public in a way that lets members of the public access it from a place and at a time individually chosen by them, and before it is reproduced electronically for that purpose, where the use is by an information-society service provider.

Section 82/B(2) gives the publisher a right to remuneration for that use, and 82/B(3) obliges the publisher to give the publication's authors an appropriate share of the resulting revenue. Section 82/C exempts a hyperlink to the publication, single words or very short extracts of it, and an individual user's private or non-commercial use. Under Section 111/J(1), the publisher may exercise these exclusive rights only for uses occurring on or after 1 June 2021.

The protection lasts two years from the first day of the year after the press publication was first made public, per Section 84(1)(g). The exclusive rights under Section 82/B belong to the publisher for a press publication made public on or after 6 June 2019, per Section 111/J(1).