The Hungarian Government has published a new draft decree, which, once adopted, will establish new fines for failure to provide data, either within the deadline or at all, that is necessary for the registration of organizations under Act XXIII of 2023 on Cybersecurity Certification and Cybersecurity Supervision (“Cyber-certification Act”), which is the Hungarian transposition of the NIS2 Directive [Directive (EU) 2022/2555]. For numerous organizations, the above-mentioned deadline was 30 June 2024.
Author
Dr. Csaba Vári
BrowsingCsaba Vári is the Head of IPTech Practice Group in Budapest.
With more than 20 years of experience Csaba represents Hungarian and multinational companies in many business sectors (e.g., automotive, manufacturing, bank, insurance, trade, pharma, real estate, IT) on a broad range of business law, including data privacy and cybersecurity issues and compliance investigations.
Csaba has particularly broad experience in the field of data protection; he provides legal advice to our clients in connection with the EU General Data Protection Regulation (GDPR) and relevant Hungarian laws, and provides complex assessments of companies' data processing activities, GAP analysis, and assists in introduction of GDPR compliant data processes and policies.
Csaba also assists clients in connection with Data Subject Access Rights related matters, Intra Group Data Transfer Agreements, transfers of personal data to third countries, and assessments of legal basis for data processes (e.g., legitimate interest balancing tests, data privacy impact assessments).
Csaba assists his clients in addressing legal issues in connection with processing of consumer and employee data, and data privacy aspects of online applications.
His area of expertise includes advising on operation of surveillance systems, and preparation and operation of whistleblowing schemes. Csaba has particular experience in the area of cyber investigations and cyber incident management.
He represents clients before the National Authority for Data Protection and Freedom of Information (Hungarian DPA) in connection with data breach reporting and registering Data Protection Officers.