Skip to main content

Ukraine Draft PDP Law

Draft Law 8153 on Personal Data Protection

Ukraine's draft GDPR-aligned data protection law establishing 72-hour breach notification and automated processing rules.

Jurisdiction

Ukraine

UA

Enacted

Unknown

Effective

Unknown

Enforcement

To be established

GDPR-aligned framework under consideration

Who Must Comply

This law applies to:

  • Data controllers and processors in Ukraine (when enacted)
  • Entities processing data of Ukrainian residents
  • Automated decision-making systems

Capability triggers:

automatedDecisionMaking (increases)
Required Increases applicability

Who bears obligations:

This regulation places direct obligations on deployers (organizations using AI systems).

Safety Provisions

  • GDPR-aligned data protection framework
  • 72-hour breach notification to supervisory authority
  • Automated processing safeguards
  • Data Protection Impact Assessment for high-risk
  • Cross-border transfer restrictions

Enforcement

Enforced by

To be established

Penalties

To be determined upon enactment

Quick Facts

Binding
No
Mental Health Focus
Yes
Child Safety Focus
No
Algorithmic Scope
Yes

Why It Matters

Ukraine's GDPR-aligned framework (when enacted) will create familiar compliance pathway for AI chatbot platforms serving Ukrainian users with automated risk assessments.

Recent Developments

Draft under consideration; passage timing affected by ongoing conflict

Cite This

APA

Ukraine. (n.d.). Draft Law 8153 on Personal Data Protection. Retrieved from https://nope.net/regs/ua-draft-law-8153

BibTeX

@misc{ua_draft_law_8153,
  title = {Draft Law 8153 on Personal Data Protection},
  author = {Ukraine},
  year = {n.d.},
  url = {https://nope.net/regs/ua-draft-law-8153}
}