The Decree No. 5/2026 (III. 16.) of the National Media and Infocommunications Authority (NMHH), which entered into force on 20 March 2026, specifically amended Decree No. 4/2024 (III. 21.) of the NMHH governing out-of-court dispute resolution bodies (including the Online Platform Dispute Resolution Council, OPVT). The explicit objective of the amendment was to eliminate the practical obstacles of the previous regulatory framework: to reduce administrative burdens, to accelerate proceedings, and to ensure that the enforcement of users’ rights is free of charge.
The escalation of the global geopolitical situation and the expansion of digital financial solutions have compelled regulatory authorities to respond. On 25 March 2026, the Central Bank of Hungary published its latest Recommendation No. 3/2026, which constitutes a milestone in the field of sanctions screening of fund transfers and crypto-asset transfers. The purpose of the Recommendation is to provide a uniform and stringent framework for the effective implementation of European Union and national restrictive measures.
The legislator has adopted Act CXXXV of 2025 amending the relevant legislation, which introduces fundamental changes to the Hungarian cybersecurity regulatory framework.
The purpose of the amendment is twofold: on the one hand, to implement the EU Cyber Resilience Act (CRA) at national level, and on the other hand, to clarify and extend the cybersecurity rules already in force in Hungary. The changes will enter into force gradually from 2026 and will affect a wide range of organisations that have previously not been subject to cybersecurity obligations, or only to a limited extent.