{"id":1233,"date":"2013-10-16T08:34:36","date_gmt":"2013-10-16T06:34:36","guid":{"rendered":"http:\/\/www.dataprivacy.hu\/?p=1233"},"modified":"2013-11-09T07:39:02","modified_gmt":"2013-11-09T06:39:02","slug":"new-hungarian-whistleblowing-legislation","status":"publish","type":"post","link":"https:\/\/www.dataprivacy.hu\/?p=1233","title":{"rendered":"New Hungarian Whistleblowing Legislation"},"content":{"rendered":"

The Hungarian Parliament has recently adopted the Act <\/span>CLXV of 2013 on Complaints and Public Interest Disclosure which lays down comprehensive and detailed rules for the receipt, investigation and handling of whistleblowing reports in Hungary. <\/span><\/p>\n

The main provisions of the Act can be summarized as follows:<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act authorizes the employer (as well as it owner) to establish a whistleblowing system in order to investigate reports. Reported conducts may include violation of legal provisions as well as rules of conduct (code of conduct) issued by the employer, provided that such rules protect public interest or significant private interest. The Act intends to cover SOX matters as reportable conducts, too. \u00a0<\/span><\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Reporting persons may include employees, contractors as well as any other third person (including legal persons) pursuing a legitimate interest for making a report or to remedy the reported situation. The identity of the reporting person may not be disclosed without his \/ her consent.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The employer shall publicly disclose \/ make available on its corporate website in Hungarian language the rules of conduct the violation of which may be subject to reporting, as well as a detailed description of the reporting procedure.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act lays down that the investigation of the report is mandatory for the employer and the reporting person shall be informed on the outcome of the investigation, as well as on the measures taken. <\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The employer has 30 days to investigate the report which deadline may be extended, if necessary, however, the investigation may not exceed three months in total.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act also permits the receipt and investigation of anonymous reports. The investigation of anonymous reports is not mandatory for the employer, however, the deadline for the investigation (30 days) of such reports cannot be further extended.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act lays down strict confidentiality obligations for the investigators and rules \/ deadlines for the retention of reports.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act expressly prohibits the processing of special data within the reporting system.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The operator of the system shall ensure the fair process rights of the reported person, including the right to be heard. Upon start of the investigation, the reported person shall be informed on the accusation as well as his rights. Notification to the reported person may be delayed if such disclosure likely prevents the result of the investigation.<\/span>The employer shall ensure that the investigation of the reported conduct is proportionate with the restriction of the rights of the reported person.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act permits data transfer abroad, provided that adequacy of data transfer is ensured and the foreign data controller and data processor make a contractual commitment to comply with the provisions of the Act.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act prohibits retaliation against the reporting person, unless the reporting person acted in bad faith. <\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act lays down that the whistleblowing system shall be registered with the DPA.<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>The Act permits the assignment of independent attorneys for the receipt and investigation of reports. <\/span><\/p>\n

The Act is scheduled to enter into force by 1 January 2014 and the new legislation will replace the Act on the Fair Process. <\/span><\/p>\n

In order to comply with the provisions of the Act, the operators of whistleblowing systems in the Hungarian jurisdiction shall:<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>publicly disclose and make available in their own website their codes of conduct as well as the rules of the whistleblowing procedure in Hungarian language;<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>ensure that the whistleblowing procedure, including the receipt of reports and internal deadlines for the investigation comply with the provisions of the Act;<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>ensure that vendors of the whistleblowing system make a contractual commitment to comply with the provisions of the Act;<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>ensure the adequacy of international data transfers relating to the system;<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>initiate the registration of the whistleblowing system or modification existing whistleblowing registrations before the Hungary DPA.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

The Hungarian Parliament has recently adopted the Act CLXV of 2013 on Complaints and Public Interest Disclosure which lays down comprehensive and detailed rules for the receipt, investigation and handling of whistleblowing reports in Hungary. The main provisions of the Act can be summarized as follows: \u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 The Act authorizes the employer (as well as […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[28],"tags":[36,37,92,143,32,232,27],"_links":{"self":[{"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=\/wp\/v2\/posts\/1233"}],"collection":[{"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1233"}],"version-history":[{"count":6,"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=\/wp\/v2\/posts\/1233\/revisions"}],"predecessor-version":[{"id":1257,"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=\/wp\/v2\/posts\/1233\/revisions\/1257"}],"wp:attachment":[{"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataprivacy.hu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}