Hungary: Act on the Information Security of State and Municipal Bodies
The Act on the Information Security of State and Municipal Bodies is a law passed by the Hungarian government to regulate information security measures in public institutions. The law outlines the requirements for protecting information systems and personal data and incident response and reporting procedures.
The law requires state and municipal bodies to implement technical and organizational measures to ensure their information systems’ confidentiality, integrity, and availability. It also requires regular security assessments and the appointment of a data protection officer in larger organizations.
The law has been praised for its comprehensive information security approach and emphasis on protecting personal data. However, some critics have raised concerns about the potential for the law to be used to infringe on civil liberties and privacy rights. The law has been amended several times since it was first introduced to address some of these concerns and to keep up with technological developments and changes in the threat landscape.
CHAPTER I: GENERAL PROVISIONS
1 – Interpretative provisions
2 – Scope of the Act
CHAPTER II: ELECTRONIC INFORMATION SECURITY REQUIREMENTS
3 – Essential electronic information security requirements
4 – Security classification of electronic information systems
5 – Security levels of the bodies having an electronic information system
6 – Bodies’ duties ensuring the protection of their electronic information systems
CHAPTER III: SECURITY SURVEILLANCE OF ELECTRONIC INFORMATION SYSTEMS
7 – Surveillance of the security of electronic information systems
8 – Information security supervisor
9 – Vulnerability testing, investigation of security incidents
10 – Incident response centres
11 – Ensuring government coordination
12 – Data protection provisions
CHAPTER IV: EDUCATION AND TRAINING, RESEARCH AND DEVELOPMENT
CHAPTER V: FINAL PROVISIONS
13 – Authorizing provisions
14 – Entry into force
15 – Transitional provisions
16 – Compliance with the law of the European Union
