{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Lakatos Köves & Partners"]
[]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 5/1/2025"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Hungary"]
["NIS2 Implementation Status"]
["Status","Enacted"]
["Status of the NIS2 Implementation Act","Hungary implemented the \nNIS2 Directive into \nAct LXIX (“\nCybersecurity Act”) in 2024. This new act repealed the previous implementing act (i.e. \nAct XXIII which came into force back in 2023) and it aims to regulate market participants, government entities and municipalities, along with cyber certification, comprehensively and in more detail, in contrast to its predecessor and consolidate the Hungarian respective legislation into one act to comply with the \nNIS2 Directive and \nCER Directives, as well as the \nENISA and \nDORA Regulations. The \nCybersecurity Act introduces significant changes, as previously left out provisions were implemented therein (e.g., in cases of non-compliance, the authority may request that the managing director of the service provider be banned from their position and also prescribed the obligation to appoint a representative in certain cases). However, the most significant requirements of the \nNIS2 Directive—such as registering with the competent authority, implementing security measures, engaging auditors, and preparing audits on the company’s electronic information systems—remain unchanged under the new regime.\n"]
["If available, foreseeable significant deviations of the National Implementation Act from the NIS2 Directive","In general, there are no significant deviations, with one exception regarding the main establishment principle under \nArticle 26 of the \nNIS2 Directive. Unlike the sequential conditions set out under \nArticle 26(2) of the \nNIS2 scope provision, the \nCybersecurity Actsimply establishes an alternative relationship between the conditions.\n"]
["Expected date of entry into force of the Implementation Act","The main provisions are already in force. \n"]