A Shift in Regulatory Approach

The Impact of NIS2 on Hungarian Cybersecurity Regulation

Abstract

The study examines the development of Hungarian cybersecurity regulation through a comparison of Act L of 2013 and Act LXIX of 2024, with particular attention to the impact of the European Union's NIS2 directive. The research presents how the regulatory approach evolved from a focus on the protection of state electronic information security towards a more comprehensive cybersecurity ecosystem based on risk management and incident handling. A detailed analysis reveals structural, terminological, and strategic changes in the legislative texts, highlighting how the regulatory environment has adapted to the rapid evolution of threats associated with digitalization. The study emphasizes that the new challenges related to digital transformation necessitated the expansion and updating of legislation, a trend observable at technological, organizational, and regulatory levels alike. The findings underline that modern cybersecurity regulation not only focuses on technological protective measures but also places significant emphasis on strengthening resilience, adopting a risk-based approach, and reinforcing national-level coordination, thereby contributing to the creation of a unified level of cybersecurity across the European Union.