Data Protection Laws and Freedom of Expression: Hungary
Constitutional/Primary Law Background - see also ECHR and EU Charter
Article 9 of the contemporary Hungarian Constitution (2011 as revised 2016) provides that everyone has the right to freedom of expression and sets out commitments to the freedom and diversity of the press and to conditions for the free dissemination of information necessary for the formation of public opinions. Limitations are enumerated based on human dignity and the dignity of the Hungarian nation and of any national, ethnic, racial or religious community. It is stated that detailed rules on press freedom, the supervisory organ for media and communication and detailed rules on electoral advertising (which it is stated must be free and equal) will be laid down in a cardinal Act. Article 10 separately provides that Hungary will ensure freedom of scientific research, artistic research, learning and (within a statutory framework) teaching. Meanwhile, Article 6 enunciates the right to have private and family life, home, communications and good reputation respected. It also establishes a right to the protection of personal data and that an independent supervisory authority for this will be established by a cardinal Act. Article U establishes special limitations as regarding “holders of power under the communist dictatorship” stating that personal data related to their roles and related acts may be disclosed to the public and toleration given to factual statements here with the exception only of deliberate statements that are untrue in their essence.
The first (quasi-)constitutional protection of freedom of the press including the abolition of censorship can be traced to Law 18 of 1848 on the Press. The Communist 1949 Constitution officially guaranteed citizens’ privacy of the home and correspondence (art 57) and “[i]n accordance with the interests of the workers” freedom of speech and the press (art 55). The constitutional changes of 1990 including reformulated provision on freedom of expression (art 61) and protections for good reputation, inviolability of the home, private secrets and personal data (art 59). With the exception of Article U which was adopted in 2013, the current provisions noted in the previous paragraph arose from the adoption of a new Constitution in 2011.
First-Generation Statutory Law
Hungary adopted comprehensive first-generation data protection Act LXIII on the Protection of Personal Data and Disclosure of Data of Public Interest 1992 which, under article 59 of the Constitution of the Republic of Hungary as amended in 1990 required a two-thirds parliamentary majority (and thereby had a quasi-constitutional status).
Special Expression Derogation
There was no relevant provision.
Broad Expression Derogation
There was no specific provision.However, much of the debate on the legislation related to the general tension between data protection and freedom of expression/information.
Personal Exemption
No exemption for personal or household processing was provided for.
Knowledge Facilitation Framework
Article 32 addressed the processing of data in for research purposes. According thereto, data collected and stored for purposes of scientific research was not to be used for other purposes. Personal data would have to be anonymized (‘unidentified’) as soon as possible. Data which would allow for the identification of a natural person were required to be stored separately. Personal data could, moreover, be published in connection with scientific research if (a) the data subject consented thereto or (b) such publication was required to display the result of research relating to historic events.
|
Second-Generation Statutory Law
In 2003 and iSee T/3735 A személyes adatok védelméről és a közérdekű adatok nyilvánosságáról szóló 1992. évi LXIII. törvény módosításáról) which included establishing a personal exemption. Hungary joined the EU on 1 May 2004 and, thereby, became subject to Directive 95/46. An entirely new data protection law was enacted in 2011 (Act CXII of 2011 on Informational Self-Determination and Freedom of Information).
Special Expression Derogation
The only explicit provision on special expression in the 2011 Act set out an exemption from the requirement to notify/register processing with the DPA files of media service providers (as specified within the scope of the Act on Media Services and Mass Telecommunication) which exclusively serve their own information activities (s. 65(3)(g)).[11] However, some very limited derogations were established through necessary implication under general provisions. Thus, the proactive transparency requirement even when collecting information directly from a data subject could be dispensed with when this was either impossible or involved a disproportionate effect.In these circumstances, the controller had instead to disclose to the world at large a wide range of information, including the event of data collection, its scope, its purpose, the duration of processing, possible controllers authorized to acquire knowledge of the data and information on the data subjects’ rights and legal redress opportunities (s. 20(4)). As a result of interaction with the law on the press and media, a derogation from the reactive transparency rule (subject access) was also established insofar as this would impact the confidentiality of the sources of information of journalists (s. 19 read with s. 6(1) of the Act CIV of 2010 on Freedom of the Press and the Fundamental Rights of Media Content).
Broad Expression Derogation
No special provision adopted.
Personal Exemption
From 2003 onwards the law no longer applied to natural persons controlling data exclusively for their own personal purposes (s. 2(4)).
Knowledge Facilitation Framework
The 2011 legislation carried forward provisions establishing that such data recording for scientific research purposes should (i) not be used for other purposes, (ii) be rendered unidentifiable as soon as possible and (iii) be stored in a manner where attribution information was kept separately from other information. It was finally provided that scientific research could lead to the publication of personal data with the consent of the data subject or if required to display the result of research related to historic events (s. 12).
|
Third-Generation Statutory Law
Hungary adopted third-generation data protection provisions through amendments to the 2011 Act which inter alia implemented the GDPR in 2018.
Special Expression Derogation
The Hungarian Data Protection Act implementing the GDPR fails to establish any explicit derogation in favour of journalism or any other form of special expression.
Broad Expression Derogation
No special provision.
Personal Exemption – see GDPR, art. 2(2)(c)
Knowledge Facilitation Framework – see also GPDR, art. 5(1)(b) (compatibility), art. 5(1)(e) (time limits) and art. 89(1) (appropriate safeguards)
The Data Protection Act implementing the GDPR does not contain any specific knowledge facilitation derogations. However, as in the previous, law a provision enabling those conducting scientific research to disclose personal data where necessary to present results on historical events was included (2018. évi XXXVIII. törvény az információs önrendelkezési jogról és az információszabadságról szóló 2011. évi CXII. törvénynek az Európai Unió adatvédelmi reformjával összefüggő módosításáról, valamint más kapcsolódó törvények módosításáról, s. 5(8)).
|