Hungary

Overview

Stage of legislative progress 
Eg. pre-consultation, in consultation

On 29 August 2017 the Ministry of Justice published a draft bill intended for 'implementation' of the GDPR in Hungary but this relates only to the current Hungarian general data protection act, the InfoAct. This public consultation ended on 08 September 2017 and the comments and results have not been published yet. These will be published when the government submits the draft bill to the Parliament. The Ministry of Justice is only in charge for the InfoAct as the task of 'implementation' of other sectorial data protection acts (e.g. in the telecom, finance, e-commerce, health sectors) belongs to other ministries. There is no official information on the status of legislative progress at these ministries.

Approach to implementation 
Eg. amendments to existing law, total repeal of old laws

According to the published draft bill the InfoAct is going to remain in force but its scope will be limited to data processing activities which are not within the scope of the GDPR. As far activities covered by the GDPR are concerned, only certain provisions of the InfoAct will be applicable. These provisions will be listed in Article 2 of the InfoAct (in its amended form).

Timescale for implementation 
Eg. pre-consultation, in consultation

The Ministry of Justice is likely to submit the draft to the government meeting in Q4 2017 and in this case it is likely that the Parliament will vote on it during Q1 2018.

As far as sectorial legislation is concerned there is no official information on the status of legislative progress.


Areas where Member States must have local laws:

Personal data and freedom of expression 

n/a

Penalties

n/a


 

Areas where Member States may have local laws:

Professional secrecy 

n/a 

Scientific, historical or statistical purposes 

n/a

Employment

n/a

Personal data of deceased persons 

The draft bill on amending the InfoAct, prepared by the Ministry of Justice, contains provisions on processing of personal data of deceased persons. It grants to the deceased persons' close relatives the right to erasure and to obtain restriction on of processing, upon request made within five years following the death.

Children online

n/a

Special rules for special categories of data
n/a

Genetic, biometric or health data

n/a

Designation of a Data Protection Officer

n/a

National identification numbers/any other identifier of general application

n/a


Other:

Any other areas under discussion
n/a