Legal blog

2026-09-11 | Data Protection

The revolution of artificial intelligence has forced not only the technology sector but also legislators to take action. Although ChatGPT and similar large language models may appear to users to be simple chat programs, an astonishing amount of data processing takes place in the background. The European Union’s legal framework has highlighted that these models raise serious copyright and data protection challenges, which cause significant headaches for developers.

Continue

2026-09-10 | IT Law

The next stage in the development of AI is no longer simply about artificial intelligence answering questions or making recommendations. So-called AI agents are increasingly capable of acting autonomously on behalf of users: initiating purchases, booking appointments, carrying out financial transactions, or even managing processes across multiple digital systems.

This, however, raises a new question, primarily of a legal nature: how can it be determined whether an AI agent was actually authorised to perform a particular action, and who is liable if it exceeds the limits of its authority?

Continue

2026-08-07 | Crypto

The market of digital finance and crypto-assets is continuously developing, to which domestic legislation must also dynamically adapt. Act XXXVIII of 2026 on the Repeal of Certain Statutory Provisions Concerning Crypto-Asset Conversion Services, entering into force on 7 August 2026, constitutes a significant milestone in this doctrinal field.

The focus of the legislation is the phasing out of the previously introduced validation obligation, as well as the termination of the related criminal law and administrative authority proceedings, the purpose of which is to establish uniform regulation and to create the conditions for customers to use services in a safe and transparent manner.

Continue

2026-08-06 | IT Law

On 2 August 2026, Decree No. 7/2026 (VII. 30.) of the Supervisory Authority for Regulatory Affairs (SZTFH)entered into force. The Decree lays down the detailed rules governing the authorisation and registration of crypto-asset service providers engaged in crypto-asset exchange validation activities. At the same time, it repeals the previously applicable SZTFH Decrees No. 10/2025 (VI. 26.) and No. 12/2025 (VI. 26.), which regulated the same subject matter.

The primary objective of the new Decree is to align the Hungarian regulatory framework with the European Union's legal framework governing crypto-assets while ensuring a more coherent and transparent system for the authorisation and supervision of service providers operating in this sector.

Continue

2026-06-18 | IT Law

The President of the Supervisory Authority for Regulated Activities (SZTFH) has issued Decree No. 6/2026. (VI. 8.) SZTFH, which comprehensively amends certain decrees on the subject of cybersecurity. The explicit intention of the legislator is to ease the situation of enterprises, significantly reduce administrative burdens, and promote market competition in the information technology security sector.

Continue

2026-05-04 | IT Law

The Decree No. 5/2026 (III. 16.) of the National Media and Infocommunications Authority (NMHH), which entered into force on 20 March 2026, specifically amended Decree No. 4/2024 (III. 21.) of the NMHH governing out-of-court dispute resolution bodies (including the Online Platform Dispute Resolution Council, OPVT). The explicit objective of the amendment was to eliminate the practical obstacles of the previous regulatory framework: to reduce administrative burdens, to accelerate proceedings, and to ensure that the enforcement of users’ rights is free of charge.

Continue

2026-04-14 | Crypto, E-trade

The escalation of the global geopolitical situation and the expansion of digital financial solutions have compelled regulatory authorities to respond. On 25 March 2026, the Central Bank of Hungary published its latest Recommendation No. 3/2026, which constitutes a milestone in the field of sanctions screening of fund transfers and crypto-asset transfers. The purpose of the Recommendation is to provide a uniform and stringent framework for the effective implementation of European Union and national restrictive measures.

Continue

2026-01-09 | IT jog, IT Law

The legislator has adopted Act CXXXV of 2025 amending the relevant legislation, which introduces fundamental changes to the Hungarian cybersecurity regulatory framework.
The purpose of the amendment is twofold: on the one hand, to implement the EU Cyber Resilience Act (CRA) at national level, and on the other hand, to clarify and extend the cybersecurity rules already in force in Hungary. The changes will enter into force gradually from 2026 and will affect a wide range of organisations that have previously not been subject to cybersecurity obligations, or only to a limited extent.

Continue

2026-01-06 | IT Law

The implementation of European Union regulation concerning artificial intelligence has entered a new phase in Hungary.
Decree No. 44/2025 (XII. 23.) of the Ministry for National Economy (NGM) constitutes an implementing regulation related to high-risk artificial intelligence systems, setting out the rules governing the designation of bodies responsible for conducting conformity assessments.

Although the decree does not primarily apply to undertakings that develop or deploy AI systems, it has an indirect impact on all market participants that intend to place high-risk AI solutions into operation in Hungary.

Continue