New Data Protection Law in Hungary: Binding Corporate Rules and ’ad hoc’ contractual arrangements omitted from the list of adequacy instruments
The Hungarian Parliament has adopted the Act No CXII of 2011 on Informational Self-Determination and Freedom of Information (the new Data Protection Act of 2011), the domestic implementation of the European Data Protection Directive (95/46/EC) which will enter into force by 1 January 2012. The new Act will replace the Act LXIII of 1992 on the Protection of Personal Data and Public Access to Data of Public Interest (the Data Protection Act of 1992). The new legislation introduces significant changes, as it establishes a stronger DPA with administrative powers and provides a “balance of interest clause” which was completely missing from the Data Protection Act of 1992.