New Hungarian Cybersecurity Law In 2025: Key Takeaways

Hungary's new cybersecurity law Act LXIX of 2024 entered into force in January 2025. Although Hungary adopted the NIS2 legislation in 2023, the country passed a completely new law by the end of 2024, which took effect in January 2025 (replacing Act L of 2013 and Act XXIIII of 2023).

The purpose of this new legislation is twofold: to fully transpose the NIS2 Directive and CER Directive addressing gaps left by previous legislation, and to consolidate Hungary's scattered cybersecurity laws into a unified legal framework. Below are the key takeaways of the new framework:

• Basic Framework: The new law establishes a basic framework, with certain details (such as fines, supervisory fee, security incidents, cybersecurity training, and official audits) to be regulated in upcoming decrees. The existing MK Decree 7/2024 will remain the core decree, as it outlines the technical cybersecurity framework, including risk governance mechanisms, threat assessments, risk