Legal blog

New Cybersecurity Rules from 2026

2026-01-09 | IT jog, IT Law

The legislator has adopted Act CXXXV of 2025 amending the relevant legislation, which introduces fundamental changes to the Hungarian cybersecurity regulatory framework.
The purpose of the amendment is twofold: on the one hand, to implement the EU Cyber Resilience Act (CRA) at national level, and on the other hand, to clarify and extend the cybersecurity rules already in force in Hungary. The changes will enter into force gradually from 2026 and will affect a wide range of organisations that have previously not been subject to cybersecurity obligations, or only to a limited extent.

Continue

Search

Last blogs

Act XXXVIII of 2026 on the Repeal of Certain Statutory Provisions Concerning Crypto-Asset Conversion Services

2026-08-07

The market of digital finance and crypto-assets is continuously developing, to which domestic legislation must also dynamically adapt. Act XXXVIII of 2026 on the Repeal of Certain Statutory Provisions Concerning Crypto-Asset Conversion Services, entering into force on 7 August 2026, constitutes a significant milestone in this doctrinal field.

The focus of the legislation is the phasing out of the previously introduced validation obligation, as well as the termination of the related criminal law and administrative authority proceedings, the purpose of which is to establish uniform regulation and to create the conditions for customers to use services in a safe and transparent manner.

Changes to the Rules on the Authorisation of Crypto-Asset Service Providers in Hungary

2026-08-06

On 2 August 2026, Decree No. 7/2026 (VII. 30.) of the Supervisory Authority for Regulatory Affairs (SZTFH)entered into force. The Decree lays down the detailed rules governing the authorisation and registration of crypto-asset service providers engaged in crypto-asset exchange validation activities. At the same time, it repeals the previously applicable SZTFH Decrees No. 10/2025 (VI. 26.) and No. 12/2025 (VI. 26.), which regulated the same subject matter.

The primary objective of the new Decree is to align the Hungarian regulatory framework with the European Union's legal framework governing crypto-assets while ensuring a more coherent and transparent system for the authorisation and supervision of service providers operating in this sector.

New regulation on cybersecurity auditors and vulnerability assessors (Decree No. 6/2026. (VI. 8.) SZTFH)

2026-06-18

The President of the Supervisory Authority for Regulated Activities (SZTFH) has issued Decree No. 6/2026. (VI. 8.) SZTFH, which comprehensively amends certain decrees on the subject of cybersecurity. The explicit intention of the legislator is to ease the situation of enterprises, significantly reduce administrative burdens, and promote market competition in the information technology security sector.