Whistleblower law in Hungary #
Hungary implemented Directive (EU) 2019/1937 through Act XXV of 2023 on complaints, public interest disclosures and rules related to reporting abuses, in force since 24 July 2023. The Hungarian framework places the official external channel with the Commissioner for Fundamental Rights.
Applicable law #
- Act XXV of 2023 — official text
- Commissioner for Fundamental Rights — public interest disclosure / whistleblower report
Who must establish an internal channel #
Private employers with at least 50 employees must establish an internal reporting system. Public-sector bodies and certain specifically regulated entities also follow the act’s whistleblowing rules. Entities in the financial-services and anti-money-laundering, transport-safety, and environmental sectors are in scope regardless of headcount.
External reporting authority #
The official external reporting system is operated by the Commissioner for Fundamental Rights , which accepts public interest disclosures and whistleblower reports through its dedicated system.
Data protection authority #
For GDPR complaints relating to the handling of report data, the relevant authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) .
Key compliance points #
- Hungary’s official terminology still strongly links whistleblowing to the public-interest disclosure framework.
- The official external system accepts reports with or without identification, but the handling consequences differ depending on whether the reporter identifies themselves.
- Organisations entering Hungary should be careful to separate statutory whistleblower handling from any broader ethics or grievance channel.
Official sources #
- Act XXV of 2023 — official text
- Commissioner for Fundamental Rights — public interest disclosure / whistleblower report
- Commissioner for Fundamental Rights — submitting a report
- NAIH — Hungarian data protection authority