Digital transformation has become a priority for all major companies. This is being driven only further by the spread of artificial intelligence’s commercial use cases and ever-tightening data protection and cybersecurity regulations. However, procuring enterprise software (concerning both the development of custom-made software and “off-the-shelf” software developed for mass use) may give rise to various legal issues. Promptly identifying and addressing these issues can help prevent considerable legal and operational expenses, as well as other inconveniences.

The Hungarian Government has published a new draft decree, which, once adopted, will establish new fines for failure to provide data, either within the deadline or at all, that is necessary for the registration of organizations under Act XXIII of 2023 on Cybersecurity Certification and Cybersecurity Supervision (“Cyber-certification Act”), which is the Hungarian transposition of the NIS2 Directive [Directive (EU) 2022/2555]. For numerous organizations, the above-mentioned deadline was 30 June 2024.