Privacy Law at Ukraine
Ukraine's data protection framework is evolving, with significant reforms aimed at aligning with international standards like the EU's GDPR. Here's an overview of the current legal landscape:
Current Legal Framework
1. *Law on Personal Data Protection (2010)
Enacted on January 1, 2011, this foundational law establishes principles for personal data processing, including:
Lawfulness and Consent Data must be processed lawfully, with explicit consent from individual.
Transparency Organizations must inform individuals about data processing activities.
Data Security Implementing appropriate measures to protect personal dat.
International Transfers Personal data can only be transferred abroad if the recipient country ensures adequate protection.
2. *Amendments and Liability (2011–2012)
Subsequent amendments introduced administrative and criminal liabilities for violations, including:
Fines Up to UAH 17,000 for non-compliance.
Criminal Penalties Imprisonment for up to 3 years for severe violation.
🛠️ Draft Reforms and Future Developments
3. *Draft Law No. 8153 (2024)
In November 2024, the Verkhovna Rada adopted Draft Law No. 8153 in the first reading. Key provisions include:
*Alignment with EU Standards: Harmonization with GDPR and modernized Convention 10+.
*Expanded Rights: Introduction of rights such as data portability and protection against automated decision-making.
*Mandatory Breach Notification: Obligation to notify authorities within 72 hours of a data breach.
*Enhanced Enforcement: Introduction of significant financial sanctions for violations.
4. *Draft Law on the Data Protection Authority
This proposed legislation aims to establish an independent government agency responsible for:
*Policy Development: Creating mandatory regulations.
*Enforcement: Investigating violations and imposing fines.
*Access to Information: Obtaining necessary data from individuals and organizations.
⚖️ Enforcement and Penalties
Violations of data protection laws can result in:
*Administrative Fines: Up to UAH 17,000 for non-compliance.
*Criminal Liability: Imprisonment for up to 3 years for severe violations.
📌 Summary
Ukraine is actively modernizing its data protection laws to enhance privacy rights and align with international standard. Organizations operating in Ukraine should stay informed about these developments to ensure compliance and protect individuals' personal data.
RELATED Blog
0 comments