Hungary's AI Act authority is now on the ministry's org chart.

The department, the contact point and the sandbox

The document is instruction 2/2026. (IX. 21.) TTM on the organisational and operating rules of the Tudományos és Technológiai Minisztérium, published in Hivatalos Értesítő 2026/46 on Monday 21 September and in force from the following day. Bitport's summary of the shape is accurate: four state secretariats, eight deputy state secretariats, and a digitalisation state secretary whose secretariat is, in Bitport's words, the widest-ranging unit in the building, with the government's IT companies (IdomSoft, NISZ, Pro-M) under its direction through the Digital Hungary Agency.

Under that state secretary sits a deputy state secretary for artificial intelligence. Section 54 lists the five departments they direct: national data strategy, AI strategy, the AI market surveillance authority, AI regulation, and government records management. The one that matters to a company deploying AI is the third. Section 1.3.3.4 gives the MI Piacfelügyeleti Hatósági Főosztály five duties, three of which matter here. In plain language: it performs the market-surveillance tasks that fall to the ministry under Article 70 of the AI Act and the Hungarian AI law; it runs the Article 70 single point of contact; and it carries out the tasks set in law for operating the AI regulatory sandbox, with a duty to channel what the sandbox teaches into market surveillance and regulation.

The authority itself was not created by this rulebook. According to mihivatal.gov.hu it operates under Act LXXV of 2025 and Government Decree 344/2025 (X. 31.), as an organisational unit of the ministry rather than an independent authority. The rulebook places it on the org chart and fixes its duties.

The public face already exists. The Mesterséges Intelligencia Hivatal at mihivatal.gov.hu explains the transparency obligations that have applied since 2 August 2026, in Hungarian, for individuals and for companies, and carries a complaint page for anyone who believes a rule has been broken. The department's contact details, per the site: 1146 Budapest, Ajtósi Dürer sor 19–21., email mi_bejelentes@ttm.gov.hu. That page is the part of this story a deployer should read twice. It is the route by which a customer, an employee or a competitor can put your AI system in front of the authority.

The sentence about sovereign compute

Section 23 lists the digitalisation state secretary's duties in numbered points. Point 56 reads, in our translation: the state secretary provides for the strategic planning and development of the computing infrastructure needed to develop and apply artificial intelligence, "including high-performance computing capacity (HPC), the domestic data centres needed to train and operate artificial intelligence, and the development of sovereign computing infrastructure."

We sell in that category, and this is the first time we have seen the phrase written into a Hungarian state document as somebody's job. It is worth saying what the sentence is and what it is not. It is a remit. It is not a budget, a tender, a residency rule or a procurement preference, and the rulebook attaches none of those. It could as easily describe state-built capacity that competes with private operators, or a contract with a US vendor inside a state hall. The state's own identity platform, the Digital Citizenship Programme, runs on a US vendor's cloud stack inside the Government Data Centre, according to a NISZ announcement of 7 October 2025, republished by the eGov Hírlevél. That is a working definition of sovereign that we do not share, and the rulebook does not choose between the two.

Two cyber departments, and a date

Three departments report straight to the digitalisation state secretary rather than to any deputy (section 24): the Digitalizációs Nemzetközi Kapcsolatok Főosztály, which handles international relations, and two cyber departments. The Kiberbiztonsági Szabályozási és Audit Főosztály lists its functions by letter: regulation, requirements and methodology, scope and registry of the organisations concerned, supervision, audit supervision including the qualification and registry of auditors, certification, and, at letter g, enforcement: "compelling compliance and sanctioning." The Kibervédelmi Főosztály lists the operation of the national incident-handling (CSIRT) capability, threat analysis and early warning, vulnerability handling and crisis coordination.

Today those are the toolkits of two other bodies. SZTFH supervises and audits under the cybersecurity act that implements NIS2, and NBSZ NKI runs the national CSIRT. Government resolution 1277/2026 (VIII. 31.) ordered an examination of SZTFH with a report due on 30 September, which we wrote about on 1 September. The rulebook appeared nine days before that deadline with a department that describes SZTFH's job. Reading the one as the successor of the other is our inference, not anything the document says. The law still names SZTFH, and a law is what it would take to move the supervision. Bitport's own conclusion is the cautious one: the wider the remit, the harder the coordination.