Correct!

ANSWER: B. Back in August 2011, data controllers and data processors were given notice to review their current data processing practices to confirm whether they comply with the new rules, and introduce the necessary changes. Most sections of the Act came into force on January 1, 2012 but additional amendments will be in effect by June 30, 2012.

On January 1, 2012, Hungary’s new data privacy law (Act CXII of 2011 on Informational Self-Determination and Freedom of Information) (the "Act"), became effective. Which of the following changes was brought about by the Act?:

A. The Act no longer permits any flexibility regarding the methods of meeting data controllers' obligation;

B. Data controllers must ensure that no unauthorized use of data takes place and that it is possible to track the parties to whom personal data have been transferred and recover that data;

C. Personal data may no longer be processed without the consent of the data subject; or.

D. Under the Act, a new data protection authority will be established, but it will not be granted full powers of investigation and authority to impose fines.