Data privacy and data protection in Hungary


CMS has 'a deep and comprehensive knowledge concerning data privacy and data protection issues'. It advises on data protection compliance matters for clients in the TMT, life sciences, consumer products, hospitality and energy sectors. The regional data protection team is led from the Budapest office by Dóra Petrányi; it acts as an international hub for local and regional mandates. Petrányi is also the co-chairman of the Regulatory Committee of the Hungarian AI Coalition and is regularly involved in regulatory matters, reviewing and commenting on legislative changes. Other key names to note are senior counsel Márton Domokos who is 'very keen on details and keeping all aspects of a task under the radar', and senior associate Katalin Horváth who joined from Sár and Partners Attorneys at Law.

Practice head(s):

Dóra Petrányi


CMS’ Team has a deep and comprehensive knowledge concerning data privacy and data protection issues. They always consider not only the pure legal requirements but the client’s industry specifications and client’s internal policies as well.

Márton Domokos is a real professional. He is always available, responsive and has a customer-first attitude that is essential for a lawyer.

‘Márton Domokos always tries to find a practical solution and immediately responds in urgent cases.

Key clients





Dr. Lenkei

Futureal Group

Johnson & Johnson

K&H Bank

Liberty Global

Magyar Telekom Nyrt.

T-Systems Hungary



OTP Mobile

Partner in Pet Food

Samsung Electronics

Work highlights

  • Advising Microsoft on a full range of matters in the area of data protection.
  • Acting for UPC DTH on a cross-border multi-jurisdictional GDPR project regarding the data protection and GDPR structure of the company in the region.
  • Advised Johnson & Johnson on the full scope of data privacy matters from audits through to data protection compliance to authority investigations.

Andrékó Kinstellar

Andrékó Kinstellar is singled out for its 'solid experience in complex data protection projects and its ability to understand and handle matters involving complex business structures'. The team is actively advising clients from a broad range of industries including pharmaceutical, automotive, financial services and real estate sectors on establishing their GDPR compliance programme. Recent instruction also include handling internal investigations relating to the processing and accessing of employee data, and advising on advertising-related matters and the use of end-to-end encryption technology. Managing associate Zsombor Orbán is 'an experienced data protection lawyer with comprehensive knowledge in privacy matters'. Ákos Nagy and associate Dániel Nagy are also recommended.

Practice head(s):

Zsombor Orbán; Ákos Nagy


Knowledgeable, up-to-date, and customer-oriented.

‘Solid experience in complex data protection projects and an ability to understand and handle matters involving complex business structures’.

Strong technical knowledge, excellent connections to and experience with the regulators.

The team has a deep understanding of the digital market, and has a very strong data privacy focus.

Excellent knowledge in data privacy, and provides client-friendly templates.

The attorneys have substantial knowledge of clients and their requirements. The attorneys are specialists in their chosen legal area, and have very strong legal knowledge, but in view of the business interest.

Zsombor Orbán has a very good sense to deliver practical and to the point advice to the clients. He has a deep understanding of the in-house needs.

‘Zsombor Orbán has excellent professional knowledge of data privacy, he is very thorough, recognises the merit of the case very well and gives efficient support.

Dániel Nagy has significant experience in GDPR preparation and implementation projects. I would highlight his project management skills, and his business development efforts.

Key clients

NKM Nemzeti Közművek Zrt.


IBIDEN Hungary Gyártó Kft.

Sanofi-Aventis Zrt.

Teva Gyógyszergyár Zrt.

Teva Pharmaceuticals

Magyar Telekom Nyrt.

Inter Cars S.A.

Work highlights

  • Advising NKM Nemzeti Közművek on carrying out its comprehensive GDPR compliance project.
  • Acting for the Hungarian companies of Sanofi Group on carrying out a GDPR compliance project.
  • Advising Bridgestone Corporation on its GDPR compliance project across the CEE region.


Dentons' practice spans GDPR compliance and audits, cross-border data transfer, data security breaches, employee privacy and monitoring, and internal investigations. Leveraging its impressive regional and global footprint, the team regularly handles regional GDPR compliance matters for a mix of major local and multinational clients including Porsche, Flex, Epam Systems and Facebook. Managing partner István Réczicza and counsel Tímea Bana are the main contacts.

Practice head(s):

István Réczicza

Key clients

Affidea BV

Airbus Defence and Space

EPAM Systems



Ingenious Media




UFA Hungary

Work highlights

  • Advising the Hungarian affiliate of FremantleMedia on data protection matters.
  • Acting for Sony on various data protection matters related to the handling of data stored on devices that were given to repair services and their newsletter distribution policy.
  • Assisting Porsche Hungaria with GDPR compliance matters.

Lakatos, Köves and Partners

Lakatos, Köves and Partners handles contentious and non-contentious data protection matters. Recent highlights include representing an energy sector client in a compliant procedure at the Hungarian Data Protection Authority for the unlawful processing of personal data, and advising Iqvia on data protection and compliance issues. Practice head Iván Sólyom and associate Péter Szaniszlai are key names.

Practice head(s):

Ivan Sólyom

Key clients


Three Bond

American International School of Budapest





Szentkirályi Kékkúti Ásványvíz, subsidiary of Karlovarské minerální vody

Work highlights

  • Advised Vodafone on a broad range of data protection matters.
  • Acting for ThreeBond on all data protection law issues relating to its operation in Hungary, including drafting of a general GDPR compliance action plan.
  • Assisting Mastercard with consumer protection and data protection related to its marketing programmes.

Siegler Bird & Bird Ügyvédi Iroda

Siegler Bird & Bird Ügyvédi Iroda's practice is led by Bálint Halász which advises on the full range of data privacy and data protection issues including GDPR compliance and data breach issues. Its client list includes a considerable number of international companies across sectors including automotive, healthcare, banking, market research and TMT.

Practice head(s):

Bálint Halász

Work highlights

  • Advised the National Gaming and Esports Federation, a Hungarian esports federation, on the full set up of its business structure, which included a full GDPR compliance structure concerning its regulations and the organisation of tournaments.

Taylor Wessing Hungary

Taylor Wessing Hungary advises local and international clients on data protection matters, It also handles data transfer and related safeguarding issues. Dániel Ódor 'does an exceptional job of understanding client's needs and delivering solutions in a timely and cost effective manner'; he recently advised a US software company on the Hungarian aspects of global GDPR compliance reviews.

Practice head(s):

Dániel Ódor


Provides clients with guidance and advice in a timely and efficient manner.

Very flexible and client-oriented team. Either on phone, or in person, the firm is very efficient in handling the case in a very professional manner and also looking out for the client’s business interest. The team gains a deep understanding of the client’s products and services in order to provide the best legal solution, especially focusing on client’s GDPR compliance needs.

Dániel Ódor does an exceptional job of understanding client’s needs and delivering solutions in a timely and cost effective manner. He has great communication skills that are paired with a good understanding of the client’s technical business. He has a deep knowledge of data privacy and data protection issues with a focus on GDPR compliance.

Key clients

Whitepages Inc.


CML Construction Services Zrt. (Strabag)

Mango Hungary Kft.

Angelini Pharma

Chipita Hungary Kft.

Work highlights

  • Assisting Chipita Hungary with its GDPR audit.
  • Advising Angelini Pharma Hungary on GDPR compliance issues.

VJT & Partners

VJT & Partners has 'a truly client-focused, supportive team with great individuals at all seniority levels'. The team is jointly led by Endre Várady, who is 'dedicated, highly knowledgeable and precise', and János Tamás Varga, who is 'a strategic thinker with wide technology industry experience and business-savvy approach'. It advises clients from a broad range of industries on GDPR audit and compliance issues, as well as on employment-related data issues.

Practice head(s):

János Tamás Varga; Endre Várady


The team is highly knowledegable, fast, precise and client friendly. They always keep deadlines, put an emphasis on taking into account the context of a given case and come up with business-oriented solutions. Their reliability is second to none. Sizeable team and very good balance of involvement of juniors and seniors, super efficient delivery of services.

János Tamás Varga’s involvement is the guarantee for precise, business-minded and exceptionally efficient delivery.

Endre Várady is dedicated, highly knowledgeable and precise.

Endre Várady’s advice is succinct and clear and really helps us understand the nuances of the Hungarian regime.

Andrea Belényi is very efficient in representing clients before the authorities.

Key clients






CERHA HEMPEL Dezső & Partners

CERHA HEMPEL Dezső & Partners is praised for its 'solution-oriented attitude and its strong technical and client-care skills'. Tamàs Polauf and Adrienn Dömők jointly lead the practice, which advises clients from the healthcare, real estate, marketing, banking and insurance, and IT sectors. Dömők's knowledge and proficiency is 'outstanding in the GDPR and data protection field', and Gergely Barabás has 'deep knowledge and longstanding experience of various regulatory matters'.

Practice head(s):

Tamás Polauf; Adrienn Dömők


The team is highly competent and responsive, with the ability to keep an eye on all aspects of complex matters.

Adrienn Dömők is truly focused on being an extension of the client’s internal legal team. She is highly flexible and notable for her out-of-the-box thinking. She is a data protection generalist, who is capable of providing universal legal advice in connection with all day-to-day privacy-related matters and general data protection compliance.

Adrienn Dömők’s knowledge and proficiency is outstanding in the GDPR and data protection field.

Gergely Barabás is adept at working efficiently and has deep knowledge and longstanding experience of various regulatory matters.

Key clients




Nemzetközi Vállalatok Magyarországi Társasága

Okkal Dobban Alapítvány

OVB Vermögensberatung Kft.

Rist Kft.


Uniqa Raiffeisen Software Service Kft.

Work highlights

  • Advising AWP P&C on GDPR compliance issues.
  • Conducting a data protection audit for Infogroup Management.
  • Acted for Rist on the privacy aspects of the use of employee personal data.

DLA Piper

DLA Piper is particularly noted for acting for clients in the IT, technology and media industries on data privacy matters. Counsel Zoltán Kozma has expertise in data protection and privacy, as well as advising on freedom of information matters.

KPMG Legal Tóásó Law Firm

KPMG Legal Tóásó Law Firm's client roster features financial institutions, fast-moving consumer goods and utility service providers, which it advises on GDPR compliance matters and litigation. Bálint Tóásó regularly advises clients on full-scale GDPR preparation and compliance projects, and recently assisted a client in the transportation sector with its whistleblowing system from a data protection prospective.

Practice head(s):

Bálint Tóásó

Key clients

Pepcor Hungary Kft.

Magyar Cetelem Bank Zrt.


Raiffeisen Bank Zrt.

Budapesti Elektromos Művek Nyrt.

Auchan Magyarország Kft.

Hachette Fascicoli S.r.l.

Provident Pénzügyi Zrt.

TDK Hungary Components Kft. (EPCOS)


OTP Faktoring Zrt.

Generali Alapkezelő Zrt.

CARDIF Biztosító Magyarország Zrt.

CARDIF Életbiztosító Magyarország Zrt.

Work highlights

  • Advised Elmű-Émász Group Company on its GDPR preparation and implementation issue.
  • Assisted Pepkor Hungary with its GDPR preparation project.
  • Assisted Intrum Justitia with data privacy-related matters, including GDPR implementation.

Oppenheim Ugyvedi Iroda

Oppenheim Ugyvedi Iroda handles the data protection aspects of M&A transactions; it also advises a broad range of clients in the construction, retail and financial services sectors on GDPR compliance matters. Iván Bartal is 'responsive and understands client's business needs'.

Practice head(s):

Ivan Bartal


‘Ivan Bartal is responsive and understands client’s business needs.

Key clients




Facebook, Inc.



LKH Leoni


HELL Energy

Vodafone Hungary

Vodafone Shared Services

Bank Gutmann



CRH Hungary

Réti, Várszegi and Partners PwC Legal

Réti, Várszegi and Partners PwC Legal acts for a wide spectrum of clients on data protection and GDPR compliance matters. Csilla DékányLászló SzűcsMárta Zsédely and Réka Mihola are the main contacts.

Practice head(s):

Csilla Dékány; László Szűcs; Réka Mihola; Márta Zsédely


At SBGKAndrás György leads the team, which also includes Krisztián Osztopáni, who joined from the National Authority for Data Protection and Freedom of Information, where he was the deputy head of Department of Authorisation and Data Breach Notification. Recent instructions include advising on GDPR compliance matters and investigations relating to the handling of personal data.

Practice head(s):

András György; Krisztián Osztopáni


Provides not only legitimate but practical answers.

Krisztián Osztopáni gives prompt reactions, and has a structured way of thinking.

Key clients

AmRest Hungary

Taxify (Bolt) Hungary

SW Umwelttechnik AG

Work highlights

  • Advising AmRest Hungary on the privacy and data protection issues relating to the use of dash cams on cars and motorcycles.
  • Assisted Taxify Hungary with its data protection and internal privacy policy.
  • Advised SW Umwelttechnik on the data privacy issues relating to its biometric access control system.

Schoenherr Hetényi Ügyvédi Iroda

Schoenherr Hetényi Ügyvédi Iroda's recent highlights include assisting a financial institution with a cyber security incident, and advising a retail sector client on the data protection-related matters relating to its acquisition of an online rating site. Counsel Dániel Gera is recommended for data compliance and HR-related data matters.

Practice head(s):

Dániel Gera

Key clients


M7 Real Estate

M7 CEREF I Hungarian Propco Korlátolt Felelősségű Társaság

Uniper Hungary Energetikai Korlátolt Felelősségű Társaság

Work highlights

  • Advised M7 Ceref I Hungarian Propco on the data protection aspects of its property management activities.
  • Acted for M7 Real Estate on its GDPR compliance project.

Wolf Theiss Faludi Erős Ügyvédi Iroda

Wolf Theiss Faludi Erős Ügyvédi Iroda has 'a deep knowledge of data privacy'. Its recent instructions include advising on GDPR compliance projects and representing clients in data breach matters. Barnabás Buzási has 'very good employment and data protection knowledge'.

Practice head(s):

Barnabás Buzási


Deep knowledge of data privacy combined with similarly reliable knowledge of labour law, which makes its advice not only legally accurate but practical and quickly executable.

Quick response time. Very good knowledge of the clients’ organisation and their business needs.

Barnabás Buzási is a great advisor with a potential for further growth.