TASZ-led coalition against Hungary's March 2025 biometric surveillance laws (2025–ongoing)

In March 2025, the Hungarian Parliament passed three connected amendments — to the Assembly Act, the Infraction Act, and the Facial Recognition Technology Act — in under twenty-four hours without public debate, with the package entering into force on 15 April 2025. The legislation expanded police authority to use facial recognition technology across all infraction proceedings, including attendance at banned peaceful assemblies, and simultaneously criminalised Budapest Pride marches banned on child-protection grounds. On 29 April 2025 the Hungarian Civil Liberties Union (TASZ), the Civil Liberties Union for Europe, European Digital Rights (EDRi), and the European Center for Not-for-Profit Law (ECNL) published a joint legal analysis arguing that the expanded facial recognition scope constitutes real-time remote biometric identification in publicly accessible spaces in violation of Article 5(1)(h) of the EU AI Act — and called on the European Commission to treat Hungary as the first enforcement test of the AI Act's hard prohibitions against an EU Member State.

The triggering legislation

The March 2025 package moved together on two parallel constitutional and statutory tracks. The Assembly Act amendment introduced a ban on assemblies that violate Hungary's 2021 anti-LGBTQ+ "child protection" law — the legal basis through which the police banned Budapest Pride. The Infraction Act and Facial Recognition Technology Act amendments removed the previous threshold that limited police facial recognition authority to infractions punishable by custodial sentence, extending that authority to the full spectrum of minor infractions: jaywalking, attending a banned assembly, or any misdemeanour. The practical effect — as TASZ's legal analysis documented — was to equip Hungarian police with authority to run FRT against the national government database at any Pride parade, protest, or minor street infraction, identifying participants at a distance without prior individualised suspicion.

The four-organisation legal analysis framed the system as meeting the EU AI Act's "real-time" threshold for prohibited biometric identification because the identification is fast enough to affect the behaviour of people present at an assembly — the chilling-effect theory that underlies Article 5(1)(h)'s categorical prohibition. The analysis called explicitly on the European Commission's newly operational AI Office to scrutinise the Hungarian legislation as the first test of whether the AI Act's prohibition on biometric mass surveillance in public spaces would be enforced against a Member State that legislated around it.

Civil society campaign and coalition

The 29 April 2025 joint legal analysis was the campaign's formal launch document, simultaneously published on the websites of TASZ, EDRi, and ECNL. It carried two institutional demands: that the European Commission investigate the Hungarian legislation under the AI Act, and that it treat Hungary's response as a precedent question for EU-level enforcement of Article 5's categorical prohibitions. The coalition framing was explicit: not a request for technical interpretation, but a test of whether the AI Act's hard prohibitions existed as binding law or as aspirational text.

AlgorithmWatch co-initiated a companion public petition — "Pride With Pride! Stop Mass Surveillance at Pride, Stop Face Recognition Now" — together with TASZ, EDRi, ECNL, and the Civil Liberties Union for Europe, framing the Hungarian FRT deployment as enabling identification of Pride attendees "from a distance" to intimidate and criminalise the LGBTQIA+ community. The petition's three demands matched the joint legal analysis: EU Commission investigation and sanctioning of Hungary's AI Act violation; joint enforcement of AI and human-rights regulation; and a complete ban on facial recognition in public spaces "with no loopholes or exceptions."

On 24 June 2025, approximately fifty civil-society organisations co-signed a further letter to the European Commission demanding urgent action on the Hungarian biometric surveillance amendments — timed four days before the scheduled Budapest Pride parade.

Budapest Pride as the focal event

The 28 June 2025 Budapest Pride parade — the first under the new ban and the new facial recognition authority — became the campaign's largest visible moment. Organised in explicit defiance of the police prohibition, it drew an estimated 100,000 to 300,000 participants and was widely described as the largest anti-government demonstration in Hungary in years. Extra surveillance cameras were installed along the route; the Ministry of Interior announced that facial recognition technology would not be used to prosecute attendees. In July 2025 police confirmed they would not charge marchers, but investigations against organisers were opened, and Budapest Mayor Gergely Karácsony — who co-organised the march — was questioned by police in August 2025 and charged in January 2026.

The Pride turnout both affirmed the scale of domestic civil-society mobilisation behind the campaign and sharpened the AI Act enforcement question: the government had legislated the biometric identification authority, installed the cameras, and then declined to deploy the system for prosecution in the face of international legal pressure and the scale of the march. The deterrence question — whether the system's availability alone created the chilling effect that Article 5(1)(h) was designed to prevent — remained unresolved in the Commission's public posture.

Escalating EU enforcement demands

Through autumn 2025 the coalition escalated from legal analysis to specific institutional demands. On 30 September 2025, ECNL, the Civil Liberties Union for Europe, and TASZ published a joint statement urging the Commission to act under the AI Act and the EU Charter of Fundamental Rights. On 16 October 2025, TASZ, ECNL, the Civil Liberties Union for Europe, and EDRi signed an open letter making two concrete demands: that the Commission launch a formal infringement procedure against Hungary for AI Act and Charter violations, and that it request an expedited procedure from the Court of Justice of the European Union with interim measures. The October letter framed the stakes in explicit terms, with ECNL's Karolina Iwanska's warning that "through its silence, the EU signals that governments can ignore essential safeguards for fundamental rights and civic space."

The autumn escalation was timed in part around Pécs Pride on 4 October 2025 — a second event scheduled under the same legislative ban, with threatened penalties of up to €500 fines for participants and up to one year imprisonment for organisers — supplying a renewed factual hook for the Commission-directed demands.

Significance

This campaign occupies the corpus's first AI Act enforcement test slot — the situation in which a civil society coalition, having spent years helping write the AI Act's prohibition language, now faces an EU Member State government that has legislated directly into the prohibited category and is arguing the prohibition does not apply. The legislative package's twenty-four-hour passage without public debate, its explicit targeting of a named minority community's assembly rights, and its framing within an existing Article 7 TEU rule-of-law proceeding against Hungary together place it at the intersection of the corpus's biometric-surveillance, digital-rights, and EU AI governance threads.

In the European geography, this campaign is the Hungary counterpart to what the Reclaim Your Face campaign represented in the EU legislative phase and the EDRi-led EU AI Act coalition represented in the advocacy phase: the point at which the enacted text of the AI Act's prohibitions is tested against a sovereign government's deliberate legislative choice. The coalition structure — TASZ supplying Hungarian legal grounding and the on-the-ground client base, ECNL and the Civil Liberties Union for Europe supplying the EU-charter and civic-space framing, EDRi supplying the Brussels convening surface, and AlgorithmWatch supplying the technical and public-petition register — is the same pattern the corpus records across the European AI Act civil-society archive; the Hungarian case now activates it against enforcement rather than legislation.