Hungarian Civil Liberties Union (Társaság a Szabadságjogokért)

The Hungarian Civil Liberties Union — Társaság a Szabadságjogokért in Hungarian, abbreviated TASZ and rendered HCLU in English — is the Budapest-headquartered civil-liberties non-profit that has, since its 1994 founding, worked to make Hungarians aware of their fundamental rights and to defend them against state interference, and which since the late 2010s has become the principal Hungarian civil-society anchor on state surveillance, mercenary-spyware accountability, and biometric mass surveillance — three files on which the corpus's first Hungarian entry now sits alongside the Panoptykon Foundation on the Eastern European wing of the European digital-rights coalition map.

Founding and structure

TASZ was founded in 1994 by Gábor Attila Tóth into the immediate post-transition Hungarian human-rights field, with a mandate to ensure that "everyone in Hungary can know their basic human rights and assert them against unjustified interference" by authorities. The organisation has grown into a roughly forty-staff team complemented by close to one hundred active volunteers, governed by a five-member Board elected by the General Assembly and supervised by a three-member Supervisory Board, with the principal office in central Budapest at Tátra utca 15/b and operational presence in Debrecen, Miskolc, and Pécs. Stefánia Kapronczay serves as Executive Director and Máté Dániel Szabó as Director of Programs.

The organisation's strict funding policy is that it does not accept any funding from the Hungarian state or its institutions, nor from any political party — a discipline that has been load-bearing throughout the Orbán-era environment of legislated and informal pressure on Hungarian civil society. Revenue is drawn from private individuals, private foundations (notably the Sigrid Rausing Trust, Open Society Foundations, and foundation peers), foreign embassies, the European Commission, and the Hungarian 1%-of-income-tax civil-society designation mechanism.

Programme structure

The organisation's three project areas, organising the bulk of its long-running work, are the Equality Project (Roma rights, disability rights, LGBTQI+ equality), the Privacy Project (data protection, healthcare and patient autonomy, religious-freedom and conscience cases, and state-surveillance accountability), and the Political Freedoms Project (freedom of expression, freedom of assembly, freedom of information, and civic-space protection). Across the three areas the organisation handles approximately 4,500 legal-aid cases annually and pursues a continuing strategic-litigation portfolio, complemented by awareness campaigns and a sustained media presence; RightsCoLab's 2020 case study recorded over 5,000 legal-aid requests in that single COVID year alongside an additional 3,000-plus pandemic-related inquiries.

The mission-relevant AI and digital-rights work sits inside the Privacy Project envelope: the Pegasus / state-surveillance litigation track has been TASZ's principal pre-2024 contribution to the European mercenary-spyware-accountability record, and the 2025–2026 biometric-surveillance and AI Act work — described below — is the organisation's current spear-tip on AI policy.

Pegasus and the surveillance-accountability litigation track

In July 2021 the Forbidden Stories Pegasus Project surfaced approximately 300 Hungarian phone numbers in the leaked NSO Group surveillance-targets database, including those of investigative journalists, lawyers, activists, and members of the Hungarian opposition. TASZ's response, announced at a 27 January 2022 press conference, was a coordinated multi-jurisdiction legal strategy organised around six initial clients — Direkt36 journalists Brigitta Csikász, Dávid Dercsényi, and Szabolcs Panyi; photojournalist Dániel Németh; Belgian student activist Adrien Beauduin; and one anonymous targeted individual — with the stated objective of exposing "the practice of unlawful secret surveillance" and forcing recognition that Hungarian surveillance regulation "violates fundamental rights".

The domestic track filed proceedings before Hungarian courts, before the National Authority for Data Protection and Freedom of Information (NAIH), before the Parliament's National Security Committee, and before the Commissioner for Fundamental Rights. The international track filed a European Commission complaint, opened a European Court of Human Rights mass action on behalf of an expanded set of 36 clients — journalists, activists, and members of civil-society organisations targeted or considered at risk — that the Court registered in February 2023, and lodged a complaint with the Israeli Attorney General on behalf of three clients requesting investigation of whether NSO Group had committed a criminal offence in obtaining the Israeli state export licence for Pegasus. The litigation team named publicly comprises TASZ surveillance expert Ádám Remport, in-house lawyers Tivadar Hüttl, Flóra Kollarics, and Kata Nehéz-Posony, external Hungarian human-rights counsel Balázs Tóth, and Israeli lawyer Eitay Mack. The case sits inside the wider European-civil-society Pegasus-accountability arc — TASZ has subsequently intervened in Brejza v. Poland before the ECtHR alongside organisations from other states where Pegasus was deployed against politicians, journalists, and human-rights defenders — and the standing the Hungarian filings have established is the principal Hungarian-side contribution to the developing European jurisprudence on mercenary-spyware oversight.

Biometric mass surveillance and the EU AI Act

In March 2025 the Hungarian Parliament passed three connected amendments — to the Assembly Act, the Infraction Act, and the Facial Recognition Technology Act — through Parliament in twenty-four hours without public debate, with the amendments entering into force on 15 April 2025. The amendments criminalised attendance at Pride events banned by the police, and extended Hungarian police authority to use facial-recognition technology to identify individuals in all infraction procedures rather than only serious-crime investigations — a scope expansion that, per TASZ's published reading, brings the deployment within real-time remote biometric identification of natural persons in publicly accessible spaces and therefore inside the prohibition of Article 5(1)(h) of the EU AI Act.

TASZ's 29 April 2025 joint legal analysis, co-published with the Civil Liberties Union for Europe, EDRi, and the European Center for Not-for-Profit Law (ECNL), set out the substantive claim — that the Hungarian system, even where it operates with slight delays, meets the AI Act's "real-time" threshold because the identification is fast enough to affect the behaviour of people present at the assembly — and called on the European Commission's newly stood-up AI Office to scrutinise the Hungarian legislation as the first AI Act enforcement test. Through summer 2025 TASZ co-initiated the Pride With Pride! Stop Mass Surveillance at Pride, Stop Face Recognition Now public petition with AlgorithmWatch, EDRi, ECNL, and Liberties, framing the demand as full European Commission investigation and sanctioning of Hungary's AI Act violation, joint enforcement of AI and human-rights regulation, and a complete ban on facial recognition in public spaces "with no loopholes or exceptions". On 28 June 2025 the Budapest Pride parade went ahead despite the police ban and turned into the largest anti-government demonstration in Hungary in years.

The civil-society pressure escalated through the autumn. On 24 June 2025, nearly fifty civil-society organisations co-signed a letter to the European Commission on biometric surveillance of protesters in Hungary. On 30 September 2025 TASZ co-signed a joint statement with ECNL and Liberties urging the Commission to uphold the AI Act in Hungary. On 16 October 2025 TASZ, ECNL, Liberties, and EDRi co-signed an open letter making two specific demands — that the Commission launch an infringement procedure against Hungary for AI Act and Charter of Fundamental Rights violations, and that it request an expedited procedure with interim measures from the Court of Justice of the European Union. The October letter framed the demand in stark terms: in ECNL's Karolina Iwanska's words, "through its silence, the EU signals that governments can ignore essential safeguards for fundamental rights and civic space". The corpus's Italian record on biometric surveillance through the Hermes Center and the wider Reclaim Your Face coalition supplied the European AI Act's prohibition text on remote biometric identification; the Hungarian case is now the first real test of whether the prohibition is enforceable against an EU Member State that has built domestic law on top of it.

Coalition work

TASZ is a long-standing member of two international civil-liberties networks. The first is the International Network of Civil Liberties Organizations (INCLO), a global federation of national civil-liberties NGOs (including the American Civil Liberties Union, Liberty in the United Kingdom, and the Canadian Civil Liberties Association) that coordinates joint legal-advocacy work across jurisdictions on torture, mass surveillance, and assembly rights. The second is the Civil Liberties Union for Europe (Liberties), the Berlin-headquartered European network of national civil-liberties NGOs whose Tech & Rights cluster anchors much of TASZ's recent collaborative work on AI Act enforcement and biometric surveillance.

TASZ also sits inside the EDRi network as an Affiliate (rather than full Member, the status held by Panoptykon Foundation, AlgorithmWatch, Bits of Freedom, La Quadrature du Net, and the Hermes Center), and has joined EDRi-coordinated joint statements and campaign letters throughout the 2025 Hungarian biometric-surveillance escalation. The coalition pattern is consistent across the AI Act enforcement file: TASZ supplies Hungarian legal and political-context grounding and the on-the-ground client base, ECNL supplies the cross-EU rights-and-civic-space framing, Liberties supplies the European-network coordination, AlgorithmWatch supplies the technical-systems framing, and EDRi supplies the Brussels-level convening surface.

Funding and independence

TASZ's funding mix is the foundation-grants-plus-private-donations model standard among Eastern European civil-liberties NGOs operating without state support, anchored on the strict non-acceptance of Hungarian state and political-party funding. The Sigrid Rausing Trust has supported TASZ since 2014 under its Human Rights and Rule of Law programme, with historical grants totalling £1,630,000 and a current £240,000 grant period beginning February 2026; the Open Society Foundations is the second long-running principal foundation funder, alongside the CEE Trust for Civil Society, Norway Grants, the European Commission, several Western embassies in Budapest (France, the Netherlands, the United States, the United Kingdom), and the Media Legal Defence Initiative. Private individuals — channelled in part through the Hungarian 1%-of-income-tax civil-society designation — contribute the remainder.

Posture in the movement

In the corpus's frame, TASZ occupies the post-transition Eastern European civil-liberties union that retooled its long-running constitutional-rights mandate around digital-rights and AI-policy enforcement on-ramp. Three features distinguish it from its European peers. The first is the general civil-liberties identity rather than a digital-rights NGO identity — TASZ's Pride-defence, Roma-rights, healthcare-autonomy, and assembly-rights work supplies a broader political base from which the surveillance and biometric files draw their salience, in contrast to single-mandate digital-rights NGOs like Panoptykon (Poland), Bits of Freedom (Netherlands), or La Quadrature du Net (France). The second is the strategic-litigation register: with approximately 4,500 legal-aid cases annually and a sustained mass-action litigation track (the Pegasus ECtHR mass action of 36 clients, the multi-jurisdiction Pegasus filings, the Brejza v. Poland intervention), TASZ supplies a courts-first model of civil-society work in an environment where domestic legislative remedies have been largely closed by majority-party legislation. The third is the front-line state of European AI Act enforcement position the 2025 Hungarian biometric-surveillance laws have placed the organisation in — the EU AI Act is being tested first not in a quiet implementation cycle but against a Member-State government using AI-Act-relevant infrastructure to police a banned Pride event, and TASZ's filings and coalition work are the principal civil-society vehicle through which the test is being run. In the wider European geography, TASZ pairs with Panoptykon as the two Eastern European anchors of the post-2024 AI Act enforcement coalition, with the Hungarian case providing the enforcement test that the Polish-anchored coalition has long anticipated would arrive.