bank’s Compliance and Security Policy and Strategy identifies as a priority the duty to protect sensitive customer data and also the bank in accordance with the applicable legal and regulatory requirements, especially as banks’ information systems are defined in Hungarian law as falling under the scope of the Act on Critical Infrastructure.