Sign in

Hungary Act CXII of 2011

Act CXII of 2011 on informational self-determination and freedom of information — Hungarian National Assembly (Országgyűlés)

Also known as: Infotv, Act CXII of 2011, NAIH, Hungarian data protection act

Official site Official change log Subscribe to Hungary Act CXII of 2011 (RSS)

Current version
Act CXII of 2011 (as last amended by Act XLIX of 2026)
Published 11 September 2026. source
Status
In force
Next deadline
in 83 days
NAIH President and Vice-President file asset declarations in the new form, as of 31 December 2026 (§ 75/C(3)) source
Who must comply
All processing of personal data and of data of public interest in Hungary: it adds national rules to the GDPR, governs law-enforcement, national security and defence processing, and sets the freedom of information regime for public bodies. source
How it is assessed
Controllers comply themselves under the GDPR; public bodies must also publish data of public interest according to the general publication list in Annex 1. source
Authority
An act of the Hungarian National Assembly; the National Authority for Data Protection and Freedom of Information (NAIH) enforces it. source
Enforced by
NAIH enforces the act and mainly warns first-time GDPR offenders; it can fine and publish its decisions, with set fine ranges for budgetary bodies and for publication duties. source
Last change

Hungary's information act, known as Infotv.: it carries both the national data protection rules that sit alongside the GDPR and the freedom of information regime, and it is the statute the Hungarian supervisory authority enforces.

Recent changes

  1. Info
    Act CXII of 2011 in-force date is changed to 1 October 2026

    The in-force date of Act CXII of 2011 has been changed from 26 August 2026 to 1 October 2026. This means that the amended rules of …

    Other

Key dates

Add these dates to your calendar
  1. in 83 days NAIH President and Vice-President file asset declarations in the new form, as of 31 December 2026 (§ 75/C(3))
  2. Act XLIX of 2026 amending the Infotv promulgated
  3. Act XVIII of 2026 on access to EU funds, amending freedom of information rules, promulgated
  4. Main provisions of the Infotv enter into force and NAIH starts operating

Amendments

  1. Act CXII of 2011 (as last amended by Act XLIX of 2026) AmendmentCurrent text

    Act XLIX of 2026 on the names "megye" (county) and "kormánymegbízott" (government commissioner), promulgated on 11 September 2026, amends several provisions and repeals § 76. source

  2. Amended by Act XLVI of 2026 Amendment

    Act on rationalising law-enforcement tasks, promulgated on 13 August 2026; it rewrites the definition of processing for national security purposes (§ 3, point 10b). source

  3. Amended by Act XXXIV of 2026 Amendment

    Act on the National Asset Recovery and Protection Office, promulgated on 28 July 2026, amends §§ 33, 61(7) and 61/C of the Infotv. source

  4. Amended by Act XVIII of 2026 Amendment

    Act amending laws needed for access to EU funds, promulgated on 26 June 2026: adds a duty of good-faith cooperation in freedom of information requests (§ 26(1a)) and changes the publication rules of § 37/C and the NAIH leaders' asset declarations. source

  5. Amended by Act CXXVIII of 2025 Amendment

    Act on classified data and national security vetting, promulgated on 22 December 2025, amends §§ 17, 27 and 29 of the Infotv. source

Show 2 older amendments
  1. Amended by Act XXXVIII of 2018 (GDPR reform) Major version

    Amended the Infotv in connection with the EU data protection reform, adopted on 17 July and promulgated on 25 July 2018. source

  2. Act CXII of 2011 Major version

    The Act on the right of informational self-determination and on freedom of information, adopted on 11 July and promulgated on 26 July 2011; its main provisions applied from 1 January 2012. source

Who it applies to

The Infotv covers every processing of personal data and public interest data: it supplements the GDPR, fully governs law-enforcement, national security and defence processing, and binds public bodies on freedom of information.

Scope
The act extends to all processing of personal data and of data of public interest or data public on grounds of public interest (§ 2(1)). source
GDPR processing
For processing under the GDPR, the GDPR applies with the additions listed in § 2(2); they apply where the controller's main or single EU establishment is in Hungary, or it offers goods or services to, or monitors, people in Hungary (§ 2(5)). source
Security and defence
Processing for law-enforcement, national security and defence purposes is governed by the Infotv itself (§ 2(3)). source
Freedom of information
Public bodies and data requesters must cooperate in good faith when data of public interest, especially on public funds and national assets, is made accessible (§ 26(1a)). source

How compliance is assessed

Controllers comply themselves under the GDPR; public bodies must also publish data of public interest according to the general publication list in Annex 1.

Publication list
Bodies performing public tasks publish organisational, operational and financial data under the general publication list in Annex 1, with set update frequencies. source

Enforcement and penalties

NAIH enforces the act and mainly warns first-time GDPR offenders; it can fine and publish its decisions, with set fine ranges for budgetary bodies and for publication duties.

HUF 100,000 to 20 million

Range of a GDPR Article 83 fine imposed on a budgetary body, among other cases (§ 61(4)). source

HUF 100,000 to 50 million

Fine for failing to meet, within the deadline set, an order to publish data in the Central Information Public Data Register under subtitle 24/B (§ 63/B(3)). source

Warning first
NAIH exercises its GDPR Article 83 powers proportionately and, for a first breach, acts primarily by warning the controller or processor (§ 75/A). source
Publishing decisions
NAIH may order publication of its decision naming the controller where many people are affected, a public body is involved or the breach is serious (§ 61(2)). source

Documents

  1. Law text 2011. évi CXII. törvény az információs önrendelkezési jogról és az információszabadságról (NJT)
  2. Law text 2018. évi XXXVIII. törvény - GDPR-related amendment of the Infotv (NJT)
  3. Law text 2026. évi XVIII. törvény - access to EU funds (NJT)

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 20 September 2026. Subscribe to Hungary Act CXII of 2011 (RSS)