🇺🇦
Ukraine
Law of Ukraine on Personal Data Protection (No. 2297-VI)
Europe🔵 Substantial
Compliance Score
36%
5 Addressed
7 Partial
2 None
Authority
Ukrainian Parliament Commissioner for Human Rights (Ombudsman)
Overview
Ukraine's personal-data framework is based principally on the Law on Personal Data Protection, with oversight involving the Parliamentary Commissioner for Human Rights. Reforms and alignment with EU standards may evolve; verify current legislation.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
PartialDPO Requirements
PartialChildren's Data
PartialPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Partial? Frequently Asked Questions
What is the primary data protection law in Ukraine?+
Ukraine is governed by the Law of Ukraine on Personal Data Protection (No. 2297-VI). The law is enforced by the Ukrainian Parliament Commissioner for Human Rights (Ombudsman). According to our analysis, the country has a Substantial level of data protection framework.
Does Ukraine require a Data Protection Officer (DPO)?+
Partially. The Law of Ukraine on Personal Data Protection (No. 2297-VI) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Ukraine?+
Partially. While Law of Ukraine on Personal Data Protection (No. 2297-VI) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Ukraine?+
The Law of Ukraine on Personal Data Protection (No. 2297-VI) has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.