Draft Law No. 8153, cross border transfer reform

Draft Law No. 8153, GDPR Chapter V style cross border transfer framework

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Proposed: draft date not recorded.

A cross border transfer rule binding public and private bodies.

As of 19 September 2026.

What it requires

This draft has passed only a first reading and is not yet law; no cross border transfer duty beyond the current law currently attaches to it, and the following describes what the reform is expected to introduce.
Once enacted, expect a General Data Protection Regulation (GDPR) Chapter V style transfer framework, including adequacy assessments, standard contractual clauses, binding corporate rules, and derogations for specific circumstances, before transferring personal data of a person in Ukraine outside the country.

What it reaches

Obligation class

Transfer

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Draft Law No. 8153 is expected to introduce a more detailed cross border transfer framework modeled on General Data Protection Regulation (GDPR) Chapter V, formalizing adequacy assessments, standard contractual clauses, binding corporate rules, and derogations for specific circumstances, in place of the current 2010 law's Convention 108 and adequacy by default treatment, recorded on the sibling instrument ua-zakon-ukrainy-pro-zakhyst-personalnykh-danykh in this file.

The source states this as the reform's expected direction rather than as first reading text already adopted, and gives no article number for it. None of this binds today: the draft has passed only a first reading and remained in second reading preparation as of the most recent source located, dated May 2026.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
processes_biometrics

Read the law

recordinglaw.com
"Ukraine Data Privacy Laws: Personal Data Protection, Draft Law 8153, and the GDPR Reform," read in full (41,934 characters, not truncated)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app