Data Protection Atlas

Ukraine

Tier 3 Comprehensive law Europe

Principal framework: Law 2297-VI (EU-aligned bill pending) (2010). Regulator: Parliament Commissioner (Ombudsman). A GDPR-aligned replacement bill has been pending in the Rada as part of EU accession alignment; the Ombudsman supervises in the meantime.

At a glance

Principal law
Law 2297-VI (EU-aligned bill pending)
Regulator
Parliament Commissioner (Ombudsman)
Breach notification
No general statutory deadline under the 2010 law
Maximum penalty
Low administrative fines under the current framework
DPO required
Required for some sensitive processing
Digital consent age
No specific age set
Extraterritorial reach
Limited

Structure

Structural pattern
Not assessed
Sub-jurisdictions
None — no sub-national axis
ISO code
UA

A Pattern 4 jurisdiction has no sub-national layer to model. Devolution elsewhere in the legal system does not imply it here — check each Act rather than reasoning from the country.

Transfers and adequacy

EU member
No
EEA member
No

Instruments

No instrument profiled yet.

Sources

No source recorded yet. This record cannot rise above Tier 3 until it has one — see depth tiers.

Never independently verified — seeded from the prototype.