Law note · Ukraine
Draft Law No. 8153 on Personal Data Protection (GDPR-Aligned Reform)
Draft Law No. 8153, a comprehensive General Data Protection Regulation (GDPR)-aligned replacement for Law No. 2297-VI, passed its first reading in the Verkhovna Rada on 20 November 2024. A direct fetch confirms it is reported to add a mandatory breach notification obligation the current law lacks, a Data Protection Officer requirement triggered by processing biometric or genetic data among other thresholds, an Article 39 Data Protection Impact Assessment duty, and an Article 18 duty to disclose automated decision-making mechanisms.
As of the most recent source located, dated to roughly May 2026, it was reported pending second reading with no completion date given; no source postdating that was found confirming further progress, a stall, or withdrawal, so this status may itself be stale by the time of this research. It has not been enacted and is not currently binding.
What it asks of an app
- This draft is not yet law and has passed only a first reading. No obligation currently attaches to it; monitor for second reading and adoption.
When LexLint raises it
Declared activities: crawls_web, trains_models, high_risk_decisions, processes_voice, processes_biometrics
Primary source: recordinglaw.com legal-reference page, read directly through crawler infrastructure (205,050 characters, not truncated)