Law note · Hungary
Infotorveny (Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information)
Hungary's data-protection act predates the General Data Protection Regulation (GDPR) by roughly seven years and, unusually, originally combined data protection and freedom-of-information law in one statute; the freedom-of-information half was never split into a separate act and remains bundled alongside the data-protection half.
A direct crawler-based read of the Act's own Hungarian text supplies primary-sourced dates: footnote 1 states the Act was adopted by the National Assembly on 11 July 2011 and promulgated on 26 July 2011, and Section 73(1) reads that the Act enters into force the day after promulgation with exceptions in paragraphs (2) and (3); paragraph (2) puts most substantive sections, including the sections numbered 1 through 37, in force 1 January 2012, which is the date recorded here.
Rather than repeal the Infotorveny when the GDPR became directly applicable, Hungary amended it (sectoral alignment completed by 26 April 2019, per commentary) so it now operates as a supplementary, mainly procedural statute alongside the Regulation.
What it asks of an app
- Establish a General Data Protection Regulation (GDPR) Article 6 lawful basis before processing personal data of a person in Hungary; the Infotorveny supplements the GDPR with mainly procedural rules rather than a substantive addition to that basis.
When LexLint raises it
Declared activities: crawls_web, trains_models, generates_content, deploys_chatbot, automated_outreach, high_risk_decisions, processes_voice, processes_biometrics
Primary source: njt.jog.gov.hu, Infotorveny (direct fetch, Hungarian text, 283,570 chars, footnote 1 and sec. 73(1)-(2), verbatim)
CMS and DLA Piper commentary (GDPR-alignment sequence and dates)