The Prime Minster shall put forth their recommendation for the president of the Authority to the President of the Republic of Hungary by 15 November 2011. The President shall appoint the first president of the Authority, to take effect as of 1 January 2012. Section 75 (1) The Authority shall proceed in accordance with regulations governing the present Act in cases in progress on the grounds of submissions received by the data protection commission prior to 1 January. (2) Data controlled within the scope of responsibilities of the data protection commissioner prior to 1 January 2012 shall be controlled by the Authority from 1 January 2012. (3) Requests for data control registration under the scope of data protection registration of the present Act initiated prior to 1 January 2012; however, not registered in the data protection file up to 1 January 2012 must be requested from the Authority after 30 June 2012 in accordance with regulations governing the present Act, which, should it be omitted, implies that data control will be interrupted following 30 June 2012. Data control activities defined under the present section cannot be carried out either should, on the grounds of the request for registration submitted after 31 December 2011, the Authority have rejected registration. Section 76 Chapter 5 of the present Act qualifies as a cardinal provision pursuant to Article 6 (3) of the Fundamental Law. Section 77 The present Act facilitates compliance with a. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; b. Directive 2003/4/EC of the European Parliament and of the Council of 28 January 2003 on public access to environmental information and repealing Council Directive 90/313/EEC; c. Directive 2008/98/EC of the European Parliament and of the Council of 17 November 2003 on the re-use of public sector information; d. Council Framework Decision 2008/977/JHA of 27 November 2008 on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters. Section 78 Section 79 Section 80 (1) The following Point n) shall be added to Article 51 (2) of Act CXII of 1996 on credit institutions and financial corporations: [Pursuant to Point b) of paragraph (2), the obligation to safeguard bank secrets does not apply] “n) to the National Authority for Data Protection and Freedom of Information within its competent scope of responsibilities” (contrary to requests made in writing by these bodies to the financial institution.) (2) The following Point r) shall be added to Article 157 (1) of Act LX of 2003 on insurance companies and insurance activities: (The obligation to safeguard insurance secrets does not apply) “r) in the case of the National Authority for Data Protection and Freedom of Information within

Select target paragraph3