The legislator has adopted Act CXXXV of 2025 amending the relevant legislation, which introduces fundamental changes to the Hungarian cybersecurity regulatory framework.
The purpose of the amendment is twofold: on the one hand, to implement the EU Cyber Resilience Act (CRA) at national level, and on the other hand, to clarify and extend the cybersecurity rules already in force in Hungary. The changes will enter into force gradually from 2026 and will affect a wide range of organisations that have previously not been subject to cybersecurity obligations, or only to a limited extent.

The implementation of European Union regulation concerning artificial intelligence has entered a new phase in Hungary.
Decree No. 44/2025 (XII. 23.) of the Ministry for National Economy (NGM) constitutes an implementing regulation related to high-risk artificial intelligence systems, setting out the rules governing the designation of bodies responsible for conducting conformity assessments.

Although the decree does not primarily apply to undertakings that develop or deploy AI systems, it has an indirect impact on all market participants that intend to place high-risk AI solutions into operation in Hungary.

As of 1 November 2025, the service of authentication of documents based on electronic identification (commonly known as AVDH) was discontinued.
This service was originally introduced by Act CCXXII of 2015 on Electronic Administration (hereinafter: the “Electronic Administration Act”), which also made electronic administration mandatory for economic operators. However, Act CIII of 2023 (hereinafter: the “Dáptv.”) initiated the gradual phasing-out of the AVDH service. Pursuant to Section 119 (2) of the Dáptv., private individuals have been prohibited from using the service since 1 January 2025, while economic operators were permitted to use it only until 31 October 2025.